csaf_redhat - rhsa-2009

rhsa-2009_1335

Vulnerability from csaf_redhat

Published

2009-09-02 08:00

Modified

2024-11-05 17:08

Summary

Red Hat Security Advisory: openssl security, bug fix, and enhancement update

Notes

Topic

Updated openssl packages that fix several security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Details

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength general purpose cryptography library. Datagram TLS (DTLS) is a protocol based on TLS that is capable of securing datagram transport (for example, UDP). Multiple denial of service flaws were discovered in OpenSSL's DTLS implementation. A remote attacker could use these flaws to cause a DTLS server to use excessive amounts of memory, or crash on an invalid memory access or NULL pointer dereference. (CVE-2009-1377, CVE-2009-1378, CVE-2009-1379, CVE-2009-1386, CVE-2009-1387) Note: These flaws only affect applications that use DTLS. Red Hat does not ship any DTLS client or server applications in Red Hat Enterprise Linux. An input validation flaw was found in the handling of the BMPString and UniversalString ASN1 string types in OpenSSL's ASN1_STRING_print_ex() function. An attacker could use this flaw to create a specially-crafted X.509 certificate that could cause applications using the affected function to crash when printing certificate contents. (CVE-2009-0590) Note: The affected function is rarely used. No application shipped with Red Hat Enterprise Linux calls this function, for example. These updated packages also fix the following bugs: * "openssl smime -verify -in" verifies the signature of the input file and the "-verify" switch expects a signed or encrypted input file. Previously, running openssl on an S/MIME file that was not encrypted or signed caused openssl to segfault. With this update, the input file is now checked for a signature or encryption. Consequently, openssl now returns an error and quits when attempting to verify an unencrypted or unsigned S/MIME file. (BZ#472440) * when generating RSA keys, pairwise tests were called even in non-FIPS mode. This prevented small keys from being generated. With this update, generating keys in non-FIPS mode no longer calls the pairwise tests and keys as small as 32-bits can be generated in this mode. Note: In FIPS mode, pairwise tests are still called and keys generated in this mode must still be 1024-bits or larger. (BZ#479817) As well, these updated packages add the following enhancements: * both the libcrypto and libssl shared libraries, which are part of the OpenSSL FIPS module, are now checked for integrity on initialization of FIPS mode. (BZ#475798) * an issuing Certificate Authority (CA) allows multiple certificate templates to inherit the CA's Common Name (CN). Because this CN is used as a unique identifier, each template had to have its own Certificate Revocation List (CRL). With this update, multiple CRLs with the same subject name can now be stored in a X509_STORE structure, with their signature field being used to distinguish between them. (BZ#457134) * the fipscheck library is no longer needed for rebuilding the openssl source RPM. (BZ#475798) OpenSSL users should upgrade to these updated packages, which resolve these issues and add these enhancements.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated openssl packages that fix several security issues, various bugs,\nand add enhancements are now available for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)\nand Transport Layer Security (TLS v1) protocols, as well as a full-strength\ngeneral purpose cryptography library. Datagram TLS (DTLS) is a protocol\nbased on TLS that is capable of securing datagram transport (for example,\nUDP).\n\nMultiple denial of service flaws were discovered in OpenSSL\u0027s DTLS\nimplementation. A remote attacker could use these flaws to cause a DTLS\nserver to use excessive amounts of memory, or crash on an invalid memory\naccess or NULL pointer dereference. (CVE-2009-1377, CVE-2009-1378,\nCVE-2009-1379, CVE-2009-1386, CVE-2009-1387)\n\nNote: These flaws only affect applications that use DTLS. Red Hat does not\nship any DTLS client or server applications in Red Hat Enterprise Linux.\n\nAn input validation flaw was found in the handling of the BMPString and\nUniversalString ASN1 string types in OpenSSL\u0027s ASN1_STRING_print_ex()\nfunction. An attacker could use this flaw to create a specially-crafted\nX.509 certificate that could cause applications using the affected function\nto crash when printing certificate contents. (CVE-2009-0590)\n\nNote: The affected function is rarely used. No application shipped with Red\nHat Enterprise Linux calls this function, for example.\n\nThese updated packages also fix the following bugs:\n\n* \"openssl smime -verify -in\" verifies the signature of the input file and\nthe \"-verify\" switch expects a signed or encrypted input file. Previously,\nrunning openssl on an S/MIME file that was not encrypted or signed caused\nopenssl to segfault. With this update, the input file is now checked for a\nsignature or encryption. Consequently, openssl now returns an error and\nquits when attempting to verify an unencrypted or unsigned S/MIME file.\n(BZ#472440)\n\n* when generating RSA keys, pairwise tests were called even in non-FIPS\nmode. This prevented small keys from being generated. With this update,\ngenerating keys in non-FIPS mode no longer calls the pairwise tests and\nkeys as small as 32-bits can be generated in this mode. Note: In FIPS mode,\npairwise tests are still called and keys generated in this mode must still\nbe 1024-bits or larger. (BZ#479817)\n\nAs well, these updated packages add the following enhancements:\n\n* both the libcrypto and libssl shared libraries, which are part of the\nOpenSSL FIPS module, are now checked for integrity on initialization of\nFIPS mode. (BZ#475798)\n\n* an issuing Certificate Authority (CA) allows multiple certificate\ntemplates to inherit the CA\u0027s Common Name (CN). Because this CN is used as\na unique identifier, each template had to have its own Certificate\nRevocation List (CRL). With this update, multiple CRLs with the same\nsubject name can now be stored in a X509_STORE structure, with their\nsignature field being used to distinguish between them. (BZ#457134)\n\n* the fipscheck library is no longer needed for rebuilding the openssl\nsource RPM. (BZ#475798)\n\nOpenSSL users should upgrade to these updated packages, which resolve these\nissues and add these enhancements.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2009:1335",
        "url": "https://access.redhat.com/errata/RHSA-2009:1335"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "479817",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=479817"
      },
      {
        "category": "external",
        "summary": "492304",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=492304"
      },
      {
        "category": "external",
        "summary": "501253",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=501253"
      },
      {
        "category": "external",
        "summary": "501254",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=501254"
      },
      {
        "category": "external",
        "summary": "501572",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=501572"
      },
      {
        "category": "external",
        "summary": "503685",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=503685"
      },
      {
        "category": "external",
        "summary": "503688",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=503688"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1335.json"
      }
    ],
    "title": "Red Hat Security Advisory: openssl security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2024-11-05T17:08:28+00:00",
      "generator": {
        "date": "2024-11-05T17:08:28+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2009:1335",
      "initial_release_date": "2009-09-02T08:00:00+00:00",
      "revision_history": [
        {
          "date": "2009-09-02T08:00:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2009-09-01T06:41:25+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T17:08:28+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                  "product_id": "5Client-Workstation",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "product_id": "openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-12.el5.x86_64",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "product_id": "openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-12.el5.x86_64",
                "product": {
                  "name": "openssl-0:0.9.8e-12.el5.x86_64",
                  "product_id": "openssl-0:0.9.8e-12.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-perl-0:0.9.8e-12.el5.x86_64",
                "product": {
                  "name": "openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "product_id": "openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-12.el5.i386",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "product_id": "openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-12.el5.i386",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-12.el5.i386",
                  "product_id": "openssl-devel-0:0.9.8e-12.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-12.el5.i386",
                "product": {
                  "name": "openssl-0:0.9.8e-12.el5.i386",
                  "product_id": "openssl-0:0.9.8e-12.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-perl-0:0.9.8e-12.el5.i386",
                "product": {
                  "name": "openssl-perl-0:0.9.8e-12.el5.i386",
                  "product_id": "openssl-perl-0:0.9.8e-12.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-12.el5.src",
                "product": {
                  "name": "openssl-0:0.9.8e-12.el5.src",
                  "product_id": "openssl-0:0.9.8e-12.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-12.el5.i686",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "product_id": "openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-12.el5.i686",
                "product": {
                  "name": "openssl-0:0.9.8e-12.el5.i686",
                  "product_id": "openssl-0:0.9.8e-12.el5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "product_id": "openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-12.el5.ia64",
                "product": {
                  "name": "openssl-0:0.9.8e-12.el5.ia64",
                  "product_id": "openssl-0:0.9.8e-12.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-12.el5.ia64",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-12.el5.ia64",
                  "product_id": "openssl-devel-0:0.9.8e-12.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-perl-0:0.9.8e-12.el5.ia64",
                "product": {
                  "name": "openssl-perl-0:0.9.8e-12.el5.ia64",
                  "product_id": "openssl-perl-0:0.9.8e-12.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "product_id": "openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-12.el5.ppc64",
                "product": {
                  "name": "openssl-0:0.9.8e-12.el5.ppc64",
                  "product_id": "openssl-0:0.9.8e-12.el5.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-12.el5.ppc64",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "product_id": "openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "product_id": "openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-12.el5.ppc",
                "product": {
                  "name": "openssl-0:0.9.8e-12.el5.ppc",
                  "product_id": "openssl-0:0.9.8e-12.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-12.el5.ppc",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-12.el5.ppc",
                  "product_id": "openssl-devel-0:0.9.8e-12.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-perl-0:0.9.8e-12.el5.ppc",
                "product": {
                  "name": "openssl-perl-0:0.9.8e-12.el5.ppc",
                  "product_id": "openssl-perl-0:0.9.8e-12.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "product_id": "openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-12.el5.s390x",
                "product": {
                  "name": "openssl-0:0.9.8e-12.el5.s390x",
                  "product_id": "openssl-0:0.9.8e-12.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-12.el5.s390x",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-12.el5.s390x",
                  "product_id": "openssl-devel-0:0.9.8e-12.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-perl-0:0.9.8e-12.el5.s390x",
                "product": {
                  "name": "openssl-perl-0:0.9.8e-12.el5.s390x",
                  "product_id": "openssl-perl-0:0.9.8e-12.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-12.el5.s390",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "product_id": "openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-12.el5.s390",
                "product": {
                  "name": "openssl-0:0.9.8e-12.el5.s390",
                  "product_id": "openssl-0:0.9.8e-12.el5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-12.el5.s390",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-12.el5.s390",
                  "product_id": "openssl-devel-0:0.9.8e-12.el5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.i686 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.i686",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.s390",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5.src"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.src",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.i686 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.i686",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.s390",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.s390",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-0:0.9.8e-12.el5.i386"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-0:0.9.8e-12.el5.i686"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.i686",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-0:0.9.8e-12.el5.ia64"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-0:0.9.8e-12.el5.ppc"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-0:0.9.8e-12.el5.ppc64"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-0:0.9.8e-12.el5.s390"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.s390",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-0:0.9.8e-12.el5.s390x"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-0:0.9.8e-12.el5.src"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-0:0.9.8e-12.el5.x86_64"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.i686",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.s390",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-devel-0:0.9.8e-12.el5.i386"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-devel-0:0.9.8e-12.el5.ia64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-devel-0:0.9.8e-12.el5.ppc"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-devel-0:0.9.8e-12.el5.s390"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.s390",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-devel-0:0.9.8e-12.el5.s390x"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-perl-0:0.9.8e-12.el5.i386"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-perl-0:0.9.8e-12.el5.ia64"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-perl-0:0.9.8e-12.el5.ppc"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-perl-0:0.9.8e-12.el5.s390x"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-0:0.9.8e-12.el5.i386"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.i686 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-0:0.9.8e-12.el5.i686"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.i686",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-0:0.9.8e-12.el5.ia64"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-0:0.9.8e-12.el5.ppc"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-0:0.9.8e-12.el5.ppc64"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-0:0.9.8e-12.el5.s390"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.s390",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-0:0.9.8e-12.el5.s390x"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-0:0.9.8e-12.el5.src"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.src",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-0:0.9.8e-12.el5.x86_64"
        },
        "product_reference": "openssl-0:0.9.8e-12.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.i686 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.i686",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.s390",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-devel-0:0.9.8e-12.el5.i386"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-devel-0:0.9.8e-12.el5.ia64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-devel-0:0.9.8e-12.el5.ppc"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-devel-0:0.9.8e-12.el5.s390"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.s390",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-devel-0:0.9.8e-12.el5.s390x"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-12.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-perl-0:0.9.8e-12.el5.i386"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-perl-0:0.9.8e-12.el5.ia64"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-perl-0:0.9.8e-12.el5.ppc"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-perl-0:0.9.8e-12.el5.s390x"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
        },
        "product_reference": "openssl-perl-0:0.9.8e-12.el5.x86_64",
        "relates_to_product_reference": "5Server"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2006-7250",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2006-08-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "798100"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: mime_hdr_cmp NULL dereference crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue was corrected in Red Hat Enterprise Linux 5 via RHSA-2009:1335. It did not affect openssl packages shipped with Red Hat Enterprise Linux 6.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-0:0.9.8e-12.el5.i686",
          "5Client:openssl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-0:0.9.8e-12.el5.s390",
          "5Client:openssl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-0:0.9.8e-12.el5.src",
          "5Client:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-0:0.9.8e-12.el5.i686",
          "5Server:openssl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-0:0.9.8e-12.el5.s390",
          "5Server:openssl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-0:0.9.8e-12.el5.src",
          "5Server:openssl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-7250"
        },
        {
          "category": "external",
          "summary": "RHBZ#798100",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=798100"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-7250",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-7250"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-7250",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-7250"
        }
      ],
      "release_date": "2006-08-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-09-02T08:00:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1335"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: mime_hdr_cmp NULL dereference crash"
    },
    {
      "cve": "CVE-2009-0590",
      "discovery_date": "2009-03-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "492304"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: ASN1 printing crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-0:0.9.8e-12.el5.i686",
          "5Client:openssl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-0:0.9.8e-12.el5.s390",
          "5Client:openssl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-0:0.9.8e-12.el5.src",
          "5Client:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-0:0.9.8e-12.el5.i686",
          "5Server:openssl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-0:0.9.8e-12.el5.s390",
          "5Server:openssl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-0:0.9.8e-12.el5.src",
          "5Server:openssl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-0590"
        },
        {
          "category": "external",
          "summary": "RHBZ#492304",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=492304"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-0590",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-0590"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0590",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0590"
        }
      ],
      "release_date": "2009-03-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-09-02T08:00:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1335"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 2.6,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: ASN1 printing crash"
    },
    {
      "cve": "CVE-2009-1377",
      "discovery_date": "2009-05-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "501253"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of \"future epoch\" DTLS records that are buffered in a queue, aka \"DTLS record buffer limitation bug.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenSSL: DTLS epoch record buffer memory DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments. There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-0:0.9.8e-12.el5.i686",
          "5Client:openssl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-0:0.9.8e-12.el5.s390",
          "5Client:openssl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-0:0.9.8e-12.el5.src",
          "5Client:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-0:0.9.8e-12.el5.i686",
          "5Server:openssl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-0:0.9.8e-12.el5.s390",
          "5Server:openssl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-0:0.9.8e-12.el5.src",
          "5Server:openssl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1377"
        },
        {
          "category": "external",
          "summary": "RHBZ#501253",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=501253"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1377",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1377"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1377",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1377"
        }
      ],
      "release_date": "2009-05-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-09-02T08:00:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1335"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenSSL: DTLS epoch record buffer memory DoS"
    },
    {
      "cve": "CVE-2009-1378",
      "discovery_date": "2009-05-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "501254"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka \"DTLS fragment handling memory leak.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenSSL: DTLS fragment handling memory DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments. There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-0:0.9.8e-12.el5.i686",
          "5Client:openssl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-0:0.9.8e-12.el5.s390",
          "5Client:openssl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-0:0.9.8e-12.el5.src",
          "5Client:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-0:0.9.8e-12.el5.i686",
          "5Server:openssl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-0:0.9.8e-12.el5.s390",
          "5Server:openssl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-0:0.9.8e-12.el5.src",
          "5Server:openssl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1378"
        },
        {
          "category": "external",
          "summary": "RHBZ#501254",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=501254"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1378",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1378"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1378",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1378"
        }
      ],
      "release_date": "2009-05-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-09-02T08:00:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1335"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenSSL: DTLS fragment handling memory DoS"
    },
    {
      "cve": "CVE-2009-1379",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2009-05-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "501572"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenSSL: DTLS pointer use-after-free flaw (DoS)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments. There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-0:0.9.8e-12.el5.i686",
          "5Client:openssl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-0:0.9.8e-12.el5.s390",
          "5Client:openssl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-0:0.9.8e-12.el5.src",
          "5Client:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-0:0.9.8e-12.el5.i686",
          "5Server:openssl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-0:0.9.8e-12.el5.s390",
          "5Server:openssl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-0:0.9.8e-12.el5.src",
          "5Server:openssl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1379"
        },
        {
          "category": "external",
          "summary": "RHBZ#501572",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=501572"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1379",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1379"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1379",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1379"
        }
      ],
      "release_date": "2009-05-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-09-02T08:00:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1335"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenSSL: DTLS pointer use-after-free flaw (DoS)"
    },
    {
      "cve": "CVE-2009-1386",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2009-06-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "503685"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: DTLS NULL deref crash on early ChangeCipherSpec request",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-0:0.9.8e-12.el5.i686",
          "5Client:openssl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-0:0.9.8e-12.el5.s390",
          "5Client:openssl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-0:0.9.8e-12.el5.src",
          "5Client:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-0:0.9.8e-12.el5.i686",
          "5Server:openssl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-0:0.9.8e-12.el5.s390",
          "5Server:openssl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-0:0.9.8e-12.el5.src",
          "5Server:openssl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1386"
        },
        {
          "category": "external",
          "summary": "RHBZ#503685",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=503685"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1386",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1386"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1386",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1386"
        }
      ],
      "release_date": "2009-06-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-09-02T08:00:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1335"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: DTLS NULL deref crash on early ChangeCipherSpec request"
    },
    {
      "cve": "CVE-2009-1387",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2009-06-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "503688"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a \"fragment bug.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: DTLS out-of-sequence message handling NULL deref DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
          "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-0:0.9.8e-12.el5.i686",
          "5Client:openssl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-0:0.9.8e-12.el5.s390",
          "5Client:openssl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-0:0.9.8e-12.el5.src",
          "5Client:openssl-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-0:0.9.8e-12.el5.i686",
          "5Server:openssl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-0:0.9.8e-12.el5.s390",
          "5Server:openssl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-0:0.9.8e-12.el5.src",
          "5Server:openssl-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
          "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
          "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
          "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
          "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1387"
        },
        {
          "category": "external",
          "summary": "RHBZ#503688",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=503688"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1387",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1387"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1387",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1387"
        }
      ],
      "release_date": "2009-06-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-09-02T08:00:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1335"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-0:0.9.8e-12.el5.i686",
            "5Client:openssl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-0:0.9.8e-12.el5.s390",
            "5Client:openssl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-0:0.9.8e-12.el5.src",
            "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-0:0.9.8e-12.el5.i686",
            "5Server:openssl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-0:0.9.8e-12.el5.s390",
            "5Server:openssl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-0:0.9.8e-12.el5.src",
            "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: DTLS out-of-sequence message handling NULL deref DoS"
    }
  ]
}

cve-2009-1378

Vulnerability from cvelistv5

Published

2009-05-19 19:00

Modified

2024-08-07 05:13

Severity ?

Summary

Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."

References

▼	URL	Tags
	http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest	x_refsource_CONFIRM
	http://secunia.com/advisories/42724	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229	vdb-entry, signature, x_refsource_OVAL
	http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049	vendor-advisory, x_refsource_SLACKWARE
	http://secunia.com/advisories/38794	third-party-advisory, x_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing-list, x_refsource_MLIST
	https://www.exploit-db.com/exploits/8720	exploit, x_refsource_EXPLOIT-DB
	http://www.vupen.com/english/advisories/2009/1377	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/35729	third-party-advisory, x_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200912-01.xml	vendor-advisory, x_refsource_GENTOO
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://cvs.openssl.org/chngview?cn=18188	x_refsource_CONFIRM
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/38761	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37003	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=openssl-dev&m=124263491424212&w=2	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1022241	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-792-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html	vendor-advisory, x_refsource_SUSE
	http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2009/05/18/1	mailing-list, x_refsource_MLIST
	https://launchpad.net/bugs/cve/2009-1378	x_refsource_MISC
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://www.securityfocus.com/bid/35001	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/38834	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:120	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/35461	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35128	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35571	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35416	third-party-advisory, x_refsource_SECUNIA
	http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net	x_refsource_CONFIRM
	https://kb.bluecoat.com/index?page=content&id=SA50	x_refsource_CONFIRM
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://marc.info/?l=openssl-dev&m=124247679213944&w=2	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/42733	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0528	vdb-entry, x_refsource_VUPEN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:13:25.511Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://rt.openssl.org/Ticket/Display.html?id=1931\u0026user=guest\u0026pass=guest"
          },
          {
            "name": "42724",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42724"
          },
          {
            "name": "oval:org.mitre.oval:def:7229",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229"
          },
          {
            "name": "SSA:2010-060-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.663049"
          },
          {
            "name": "38794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38794"
          },
          {
            "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
          },
          {
            "name": "8720",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/8720"
          },
          {
            "name": "ADV-2009-1377",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1377"
          },
          {
            "name": "oval:org.mitre.oval:def:11309",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309"
          },
          {
            "name": "35729",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35729"
          },
          {
            "name": "GLSA-200912-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
          },
          {
            "name": "RHSA-2009:1335",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.openssl.org/chngview?cn=18188"
          },
          {
            "name": "HPSBMA02492",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
          },
          {
            "name": "38761",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38761"
          },
          {
            "name": "37003",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37003"
          },
          {
            "name": "[openssl-dev] 20090518 Re: [openssl.org #1931] [PATCH] DTLS fragment handling memory leak",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=openssl-dev\u0026m=124263491424212\u0026w=2"
          },
          {
            "name": "36533",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36533"
          },
          {
            "name": "1022241",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022241"
          },
          {
            "name": "USN-792-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-792-1"
          },
          {
            "name": "SUSE-SR:2009:011",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html"
          },
          {
            "name": "[oss-security] 20090518 Two OpenSSL DTLS remote DoS",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/05/18/1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://launchpad.net/bugs/cve/2009-1378"
          },
          {
            "name": "NetBSD-SA2009-009",
            "tags": [
              "vendor-advisory",
              "x_refsource_NETBSD",
              "x_transferred"
            ],
            "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc"
          },
          {
            "name": "35001",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35001"
          },
          {
            "name": "38834",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38834"
          },
          {
            "name": "MDVSA-2009:120",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:120"
          },
          {
            "name": "35461",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35461"
          },
          {
            "name": "35128",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35128"
          },
          {
            "name": "35571",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35571"
          },
          {
            "name": "35416",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35416"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.bluecoat.com/index?page=content\u0026id=SA50"
          },
          {
            "name": "SSRT100079",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
          },
          {
            "name": "[openssl-dev] 20090516 [openssl.org #1931] [PATCH] DTLS fragment handling memory leak",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=openssl-dev\u0026m=124247679213944\u0026w=2"
          },
          {
            "name": "42733",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42733"
          },
          {
            "name": "ADV-2010-0528",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0528"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-05-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka \"DTLS fragment handling memory leak.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://rt.openssl.org/Ticket/Display.html?id=1931\u0026user=guest\u0026pass=guest"
        },
        {
          "name": "42724",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42724"
        },
        {
          "name": "oval:org.mitre.oval:def:7229",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229"
        },
        {
          "name": "SSA:2010-060-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.663049"
        },
        {
          "name": "38794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38794"
        },
        {
          "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
        },
        {
          "name": "8720",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/8720"
        },
        {
          "name": "ADV-2009-1377",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1377"
        },
        {
          "name": "oval:org.mitre.oval:def:11309",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309"
        },
        {
          "name": "35729",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35729"
        },
        {
          "name": "GLSA-200912-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
        },
        {
          "name": "RHSA-2009:1335",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.openssl.org/chngview?cn=18188"
        },
        {
          "name": "HPSBMA02492",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
        },
        {
          "name": "38761",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38761"
        },
        {
          "name": "37003",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37003"
        },
        {
          "name": "[openssl-dev] 20090518 Re: [openssl.org #1931] [PATCH] DTLS fragment handling memory leak",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=openssl-dev\u0026m=124263491424212\u0026w=2"
        },
        {
          "name": "36533",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36533"
        },
        {
          "name": "1022241",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022241"
        },
        {
          "name": "USN-792-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-792-1"
        },
        {
          "name": "SUSE-SR:2009:011",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html"
        },
        {
          "name": "[oss-security] 20090518 Two OpenSSL DTLS remote DoS",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/05/18/1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://launchpad.net/bugs/cve/2009-1378"
        },
        {
          "name": "NetBSD-SA2009-009",
          "tags": [
            "vendor-advisory",
            "x_refsource_NETBSD"
          ],
          "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc"
        },
        {
          "name": "35001",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35001"
        },
        {
          "name": "38834",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38834"
        },
        {
          "name": "MDVSA-2009:120",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:120"
        },
        {
          "name": "35461",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35461"
        },
        {
          "name": "35128",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35128"
        },
        {
          "name": "35571",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35571"
        },
        {
          "name": "35416",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35416"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.bluecoat.com/index?page=content\u0026id=SA50"
        },
        {
          "name": "SSRT100079",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
        },
        {
          "name": "[openssl-dev] 20090516 [openssl.org #1931] [PATCH] DTLS fragment handling memory leak",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=openssl-dev\u0026m=124247679213944\u0026w=2"
        },
        {
          "name": "42733",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42733"
        },
        {
          "name": "ADV-2010-0528",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0528"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-1378",
    "datePublished": "2009-05-19T19:00:00",
    "dateReserved": "2009-04-23T00:00:00",
    "dateUpdated": "2024-08-07T05:13:25.511Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-1387

Vulnerability from cvelistv5

Published

2009-06-04 16:00

Modified

2024-08-07 05:13

Severity ?

Summary

The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug."

References

▼	URL	Tags
	http://secunia.com/advisories/38794	third-party-advisory, x_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing-list, x_refsource_MLIST
	http://cvs.openssl.org/chngview?cn=17958	x_refsource_CONFIRM
	http://secunia.com/advisories/35729	third-party-advisory, x_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200912-01.xml	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2009/06/02/1	mailing-list, x_refsource_MLIST
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/37003	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-792-1	vendor-advisory, x_refsource_UBUNTU
	http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592	vdb-entry, signature, x_refsource_OVAL
	http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html	x_refsource_CONFIRM
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://secunia.com/advisories/38834	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35571	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740	vdb-entry, signature, x_refsource_OVAL
	http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net	x_refsource_CONFIRM
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://www.vupen.com/english/advisories/2010/0528	vdb-entry, x_refsource_VUPEN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:13:25.436Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "38794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38794"
          },
          {
            "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.openssl.org/chngview?cn=17958"
          },
          {
            "name": "35729",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35729"
          },
          {
            "name": "GLSA-200912-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
          },
          {
            "name": "[oss-security] 20090602 Re: Two OpenSSL DTLS remote DoS",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/06/02/1"
          },
          {
            "name": "RHSA-2009:1335",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
          },
          {
            "name": "HPSBMA02492",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
          },
          {
            "name": "37003",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37003"
          },
          {
            "name": "36533",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36533"
          },
          {
            "name": "USN-792-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-792-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://rt.openssl.org/Ticket/Display.html?id=1838\u0026user=guest\u0026pass=guest"
          },
          {
            "name": "oval:org.mitre.oval:def:7592",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html"
          },
          {
            "name": "NetBSD-SA2009-009",
            "tags": [
              "vendor-advisory",
              "x_refsource_NETBSD",
              "x_transferred"
            ],
            "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc"
          },
          {
            "name": "38834",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38834"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "35571",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35571"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10740",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net"
          },
          {
            "name": "SSRT100079",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
          },
          {
            "name": "ADV-2010-0528",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0528"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-06-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a \"fragment bug.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "38794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38794"
        },
        {
          "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.openssl.org/chngview?cn=17958"
        },
        {
          "name": "35729",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35729"
        },
        {
          "name": "GLSA-200912-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
        },
        {
          "name": "[oss-security] 20090602 Re: Two OpenSSL DTLS remote DoS",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/06/02/1"
        },
        {
          "name": "RHSA-2009:1335",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
        },
        {
          "name": "HPSBMA02492",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
        },
        {
          "name": "37003",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37003"
        },
        {
          "name": "36533",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36533"
        },
        {
          "name": "USN-792-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-792-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://rt.openssl.org/Ticket/Display.html?id=1838\u0026user=guest\u0026pass=guest"
        },
        {
          "name": "oval:org.mitre.oval:def:7592",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html"
        },
        {
          "name": "NetBSD-SA2009-009",
          "tags": [
            "vendor-advisory",
            "x_refsource_NETBSD"
          ],
          "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc"
        },
        {
          "name": "38834",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38834"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "35571",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35571"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10740",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net"
        },
        {
          "name": "SSRT100079",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
        },
        {
          "name": "ADV-2010-0528",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0528"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2009-1387",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a \"fragment bug.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "38794",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38794"
            },
            {
              "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
              "refsource": "MLIST",
              "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
            },
            {
              "name": "http://cvs.openssl.org/chngview?cn=17958",
              "refsource": "CONFIRM",
              "url": "http://cvs.openssl.org/chngview?cn=17958"
            },
            {
              "name": "35729",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35729"
            },
            {
              "name": "GLSA-200912-01",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
            },
            {
              "name": "[oss-security] 20090602 Re: Two OpenSSL DTLS remote DoS",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2009/06/02/1"
            },
            {
              "name": "RHSA-2009:1335",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
            },
            {
              "name": "HPSBMA02492",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
            },
            {
              "name": "37003",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37003"
            },
            {
              "name": "36533",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36533"
            },
            {
              "name": "USN-792-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-792-1"
            },
            {
              "name": "http://rt.openssl.org/Ticket/Display.html?id=1838\u0026user=guest\u0026pass=guest",
              "refsource": "CONFIRM",
              "url": "http://rt.openssl.org/Ticket/Display.html?id=1838\u0026user=guest\u0026pass=guest"
            },
            {
              "name": "oval:org.mitre.oval:def:7592",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592"
            },
            {
              "name": "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
              "refsource": "CONFIRM",
              "url": "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html"
            },
            {
              "name": "NetBSD-SA2009-009",
              "refsource": "NETBSD",
              "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc"
            },
            {
              "name": "38834",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38834"
            },
            {
              "name": "35685",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35685"
            },
            {
              "name": "35571",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35571"
            },
            {
              "name": "SUSE-SR:2009:012",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10740",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740"
            },
            {
              "name": "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net"
            },
            {
              "name": "SSRT100079",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
            },
            {
              "name": "ADV-2010-0528",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0528"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-1387",
    "datePublished": "2009-06-04T16:00:00",
    "dateReserved": "2009-04-23T00:00:00",
    "dateUpdated": "2024-08-07T05:13:25.436Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-1379

Vulnerability from cvelistv5

Published

2009-05-19 19:00

Modified

2024-08-07 05:13

Severity ?

Summary

Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.

References

▼	URL	Tags
	http://secunia.com/advisories/42724	third-party-advisory, x_refsource_SECUNIA
	https://launchpad.net/bugs/cve/2009-1379	x_refsource_MISC
	http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049	vendor-advisory, x_refsource_SLACKWARE
	http://secunia.com/advisories/38794	third-party-advisory, x_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2009/1377	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35729	third-party-advisory, x_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200912-01.xml	vendor-advisory, x_refsource_GENTOO
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/38761	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37003	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1022241	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-792-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744	vdb-entry, signature, x_refsource_OVAL
	https://exchange.xforce.ibmcloud.com/vulnerabilities/50661	vdb-entry, x_refsource_XF
	http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/35138	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2009/05/18/4	mailing-list, x_refsource_MLIST
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://secunia.com/advisories/38834	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35461	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35571	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/35416	third-party-advisory, x_refsource_SECUNIA
	http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net	x_refsource_CONFIRM
	https://kb.bluecoat.com/index?page=content&id=SA50	x_refsource_CONFIRM
	http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest	x_refsource_CONFIRM
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/42733	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0528	vdb-entry, x_refsource_VUPEN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:13:25.560Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "42724",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42724"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://launchpad.net/bugs/cve/2009-1379"
          },
          {
            "name": "SSA:2010-060-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.663049"
          },
          {
            "name": "38794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38794"
          },
          {
            "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
          },
          {
            "name": "ADV-2009-1377",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1377"
          },
          {
            "name": "35729",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35729"
          },
          {
            "name": "GLSA-200912-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
          },
          {
            "name": "RHSA-2009:1335",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
          },
          {
            "name": "HPSBMA02492",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
          },
          {
            "name": "38761",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38761"
          },
          {
            "name": "37003",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37003"
          },
          {
            "name": "36533",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36533"
          },
          {
            "name": "1022241",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022241"
          },
          {
            "name": "USN-792-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-792-1"
          },
          {
            "name": "SUSE-SR:2009:011",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html"
          },
          {
            "name": "oval:org.mitre.oval:def:9744",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744"
          },
          {
            "name": "openssl-dtls1retrievebufferedfragment-dos(50661)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50661"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html"
          },
          {
            "name": "35138",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35138"
          },
          {
            "name": "[oss-security] 20090518 Re: Two OpenSSL DTLS remote DoS",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/05/18/4"
          },
          {
            "name": "NetBSD-SA2009-009",
            "tags": [
              "vendor-advisory",
              "x_refsource_NETBSD",
              "x_transferred"
            ],
            "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc"
          },
          {
            "name": "38834",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38834"
          },
          {
            "name": "35461",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35461"
          },
          {
            "name": "35571",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35571"
          },
          {
            "name": "oval:org.mitre.oval:def:6848",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848"
          },
          {
            "name": "35416",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35416"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.bluecoat.com/index?page=content\u0026id=SA50"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://rt.openssl.org/Ticket/Display.html?id=1923\u0026user=guest\u0026pass=guest"
          },
          {
            "name": "SSRT100079",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
          },
          {
            "name": "42733",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42733"
          },
          {
            "name": "ADV-2010-0528",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0528"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-05-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "42724",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42724"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://launchpad.net/bugs/cve/2009-1379"
        },
        {
          "name": "SSA:2010-060-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.663049"
        },
        {
          "name": "38794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38794"
        },
        {
          "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
        },
        {
          "name": "ADV-2009-1377",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1377"
        },
        {
          "name": "35729",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35729"
        },
        {
          "name": "GLSA-200912-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
        },
        {
          "name": "RHSA-2009:1335",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
        },
        {
          "name": "HPSBMA02492",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
        },
        {
          "name": "38761",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38761"
        },
        {
          "name": "37003",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37003"
        },
        {
          "name": "36533",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36533"
        },
        {
          "name": "1022241",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022241"
        },
        {
          "name": "USN-792-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-792-1"
        },
        {
          "name": "SUSE-SR:2009:011",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html"
        },
        {
          "name": "oval:org.mitre.oval:def:9744",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744"
        },
        {
          "name": "openssl-dtls1retrievebufferedfragment-dos(50661)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50661"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html"
        },
        {
          "name": "35138",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35138"
        },
        {
          "name": "[oss-security] 20090518 Re: Two OpenSSL DTLS remote DoS",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/05/18/4"
        },
        {
          "name": "NetBSD-SA2009-009",
          "tags": [
            "vendor-advisory",
            "x_refsource_NETBSD"
          ],
          "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc"
        },
        {
          "name": "38834",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38834"
        },
        {
          "name": "35461",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35461"
        },
        {
          "name": "35571",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35571"
        },
        {
          "name": "oval:org.mitre.oval:def:6848",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848"
        },
        {
          "name": "35416",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35416"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.bluecoat.com/index?page=content\u0026id=SA50"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://rt.openssl.org/Ticket/Display.html?id=1923\u0026user=guest\u0026pass=guest"
        },
        {
          "name": "SSRT100079",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
        },
        {
          "name": "42733",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42733"
        },
        {
          "name": "ADV-2010-0528",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0528"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-1379",
    "datePublished": "2009-05-19T19:00:00",
    "dateReserved": "2009-04-23T00:00:00",
    "dateUpdated": "2024-08-07T05:13:25.560Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-1377

Vulnerability from cvelistv5

Published

2009-05-19 19:00

Modified

2024-08-07 05:13

Severity ?

Summary

The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."

References

▼	URL	Tags
	http://secunia.com/advisories/42724	third-party-advisory, x_refsource_SECUNIA
	http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest	x_refsource_CONFIRM
	http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049	vendor-advisory, x_refsource_SLACKWARE
	http://secunia.com/advisories/38794	third-party-advisory, x_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2009/1377	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35729	third-party-advisory, x_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200912-01.xml	vendor-advisory, x_refsource_GENTOO
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/38761	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37003	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663	vdb-entry, signature, x_refsource_OVAL
	https://launchpad.net/bugs/cve/2009-1377	x_refsource_MISC
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1022241	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-792-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html	vendor-advisory, x_refsource_SUSE
	http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2009/05/18/1	mailing-list, x_refsource_MLIST
	http://marc.info/?l=openssl-dev&m=124247675613888&w=2	mailing-list, x_refsource_MLIST
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://www.securityfocus.com/bid/35001	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/38834	third-party-advisory, x_refsource_SECUNIA
	http://cvs.openssl.org/chngview?cn=18187	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:120	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/35461	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35128	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35571	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35416	third-party-advisory, x_refsource_SECUNIA
	http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net	x_refsource_CONFIRM
	https://kb.bluecoat.com/index?page=content&id=SA50	x_refsource_CONFIRM
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/42733	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0528	vdb-entry, x_refsource_VUPEN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:13:25.060Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "42724",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42724"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://rt.openssl.org/Ticket/Display.html?id=1930\u0026user=guest\u0026pass=guest"
          },
          {
            "name": "SSA:2010-060-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.663049"
          },
          {
            "name": "38794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38794"
          },
          {
            "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
          },
          {
            "name": "ADV-2009-1377",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1377"
          },
          {
            "name": "35729",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35729"
          },
          {
            "name": "GLSA-200912-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
          },
          {
            "name": "RHSA-2009:1335",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
          },
          {
            "name": "HPSBMA02492",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
          },
          {
            "name": "38761",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38761"
          },
          {
            "name": "37003",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37003"
          },
          {
            "name": "oval:org.mitre.oval:def:9663",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://launchpad.net/bugs/cve/2009-1377"
          },
          {
            "name": "36533",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36533"
          },
          {
            "name": "1022241",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022241"
          },
          {
            "name": "USN-792-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-792-1"
          },
          {
            "name": "SUSE-SR:2009:011",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html"
          },
          {
            "name": "[oss-security] 20090518 Two OpenSSL DTLS remote DoS",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/05/18/1"
          },
          {
            "name": "[openssl-dev] 20090516 [openssl.org #1930] [PATCH] DTLS record buffer limitation bug",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=openssl-dev\u0026m=124247675613888\u0026w=2"
          },
          {
            "name": "NetBSD-SA2009-009",
            "tags": [
              "vendor-advisory",
              "x_refsource_NETBSD",
              "x_transferred"
            ],
            "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc"
          },
          {
            "name": "35001",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35001"
          },
          {
            "name": "oval:org.mitre.oval:def:6683",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683"
          },
          {
            "name": "38834",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38834"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.openssl.org/chngview?cn=18187"
          },
          {
            "name": "MDVSA-2009:120",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:120"
          },
          {
            "name": "35461",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35461"
          },
          {
            "name": "35128",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35128"
          },
          {
            "name": "35571",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35571"
          },
          {
            "name": "35416",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35416"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.bluecoat.com/index?page=content\u0026id=SA50"
          },
          {
            "name": "SSRT100079",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
          },
          {
            "name": "42733",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42733"
          },
          {
            "name": "ADV-2010-0528",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0528"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-05-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of \"future epoch\" DTLS records that are buffered in a queue, aka \"DTLS record buffer limitation bug.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "42724",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42724"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://rt.openssl.org/Ticket/Display.html?id=1930\u0026user=guest\u0026pass=guest"
        },
        {
          "name": "SSA:2010-060-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.663049"
        },
        {
          "name": "38794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38794"
        },
        {
          "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
        },
        {
          "name": "ADV-2009-1377",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1377"
        },
        {
          "name": "35729",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35729"
        },
        {
          "name": "GLSA-200912-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200912-01.xml"
        },
        {
          "name": "RHSA-2009:1335",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
        },
        {
          "name": "HPSBMA02492",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
        },
        {
          "name": "38761",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38761"
        },
        {
          "name": "37003",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37003"
        },
        {
          "name": "oval:org.mitre.oval:def:9663",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://launchpad.net/bugs/cve/2009-1377"
        },
        {
          "name": "36533",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36533"
        },
        {
          "name": "1022241",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022241"
        },
        {
          "name": "USN-792-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-792-1"
        },
        {
          "name": "SUSE-SR:2009:011",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html"
        },
        {
          "name": "[oss-security] 20090518 Two OpenSSL DTLS remote DoS",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/05/18/1"
        },
        {
          "name": "[openssl-dev] 20090516 [openssl.org #1930] [PATCH] DTLS record buffer limitation bug",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=openssl-dev\u0026m=124247675613888\u0026w=2"
        },
        {
          "name": "NetBSD-SA2009-009",
          "tags": [
            "vendor-advisory",
            "x_refsource_NETBSD"
          ],
          "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc"
        },
        {
          "name": "35001",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35001"
        },
        {
          "name": "oval:org.mitre.oval:def:6683",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683"
        },
        {
          "name": "38834",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38834"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.openssl.org/chngview?cn=18187"
        },
        {
          "name": "MDVSA-2009:120",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:120"
        },
        {
          "name": "35461",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35461"
        },
        {
          "name": "35128",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35128"
        },
        {
          "name": "35571",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35571"
        },
        {
          "name": "35416",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35416"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.bluecoat.com/index?page=content\u0026id=SA50"
        },
        {
          "name": "SSRT100079",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
        },
        {
          "name": "42733",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42733"
        },
        {
          "name": "ADV-2010-0528",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0528"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-1377",
    "datePublished": "2009-05-19T19:00:00",
    "dateReserved": "2009-04-23T00:00:00",
    "dateUpdated": "2024-08-07T05:13:25.060Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-0590

Vulnerability from cvelistv5

Published

2009-03-27 16:00

Modified

2024-08-07 04:40

Severity ?

Summary

The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.

References

▼	URL	Tags
	http://marc.info/?l=bugtraq&m=124464882609472&w=2	vendor-advisory, x_refsource_HP
	http://www.vupen.com/english/advisories/2009/0850	vdb-entry, x_refsource_VUPEN
	http://securitytracker.com/id?1021905	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/34896	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:087	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2009/1175	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/42724	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/502429/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://wiki.rpath.com/Advisories:rPSA-2009-0057	x_refsource_CONFIRM
	http://www.debian.org/security/2009/dsa-1763	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/38794	third-party-advisory, x_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing-list, x_refsource_MLIST
	http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847	x_refsource_CONFIRM
	http://secunia.com/advisories/34960	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057	x_refsource_MISC
	http://secunia.com/advisories/34666	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-750-1	vendor-advisory, x_refsource_UBUNTU
	http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc	vendor-advisory, x_refsource_FREEBSD
	http://marc.info/?l=bugtraq&m=124464882609472&w=2	vendor-advisory, x_refsource_HP
	http://www.vupen.com/english/advisories/2009/1020	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35729	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://www.osvdb.org/52864	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/34561	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35380	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=127678688104458&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/42467	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
	https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html	mailing-list, x_refsource_MLIST
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	http://www.php.net/archive/2009.php#id2009-04-08-1	x_refsource_CONFIRM
	http://secunia.com/advisories/34411	third-party-advisory, x_refsource_SECUNIA
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://www.securityfocus.com/archive/1/515055/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/34509	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/49431	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/35181	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/38834	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996	vdb-entry, signature, x_refsource_OVAL
	https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2010/3126	vdb-entry, x_refsource_VUPEN
	http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html	x_refsource_CONFIRM
	http://support.apple.com/kb/HT3865	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/1220	vdb-entry, x_refsource_VUPEN
	http://www.openssl.org/news/secadv_20090325.txt	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/1548	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/36701	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm	x_refsource_CONFIRM
	http://www.vmware.com/security/advisories/VMSA-2010-0019.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=125017764422557&w=2	vendor-advisory, x_refsource_HP
	https://kb.bluecoat.com/index?page=content&id=SA50	x_refsource_CONFIRM
	http://secunia.com/advisories/34460	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=125017764422557&w=2	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/34256	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/42733	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0528	vdb-entry, x_refsource_VUPEN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:40:04.972Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090059",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=124464882609472\u0026w=2"
          },
          {
            "name": "ADV-2009-0850",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0850"
          },
          {
            "name": "1021905",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1021905"
          },
          {
            "name": "34896",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34896"
          },
          {
            "name": "MDVSA-2009:087",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:087"
          },
          {
            "name": "ADV-2009-1175",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1175"
          },
          {
            "name": "42724",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42724"
          },
          {
            "name": "20090403 rPSA-2009-0057-1 m2crypto openssl openssl-scripts",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502429/100/0/threaded"
          },
          {
            "name": "SUSE-SU-2011:0847",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0057"
          },
          {
            "name": "DSA-1763",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1763"
          },
          {
            "name": "38794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38794"
          },
          {
            "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/project/shownotes.php?release_id=671059\u0026group_id=116847"
          },
          {
            "name": "34960",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34960"
          },
          {
            "name": "openSUSE-SU-2011:0845",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057"
          },
          {
            "name": "34666",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34666"
          },
          {
            "name": "USN-750-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-750-1"
          },
          {
            "name": "FreeBSD-SA-09:08",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc"
          },
          {
            "name": "HPSBUX02435",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=124464882609472\u0026w=2"
          },
          {
            "name": "ADV-2009-1020",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1020"
          },
          {
            "name": "35729",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35729"
          },
          {
            "name": "RHSA-2009:1335",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
          },
          {
            "name": "52864",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/52864"
          },
          {
            "name": "34561",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34561"
          },
          {
            "name": "35380",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35380"
          },
          {
            "name": "HPSBOV02540",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=127678688104458\u0026w=2"
          },
          {
            "name": "42467",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42467"
          },
          {
            "name": "APPLE-SA-2009-09-10-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10198",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198"
          },
          {
            "name": "36533",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36533"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/archive/2009.php#id2009-04-08-1"
          },
          {
            "name": "34411",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34411"
          },
          {
            "name": "NetBSD-SA2009-008",
            "tags": [
              "vendor-advisory",
              "x_refsource_NETBSD",
              "x_transferred"
            ],
            "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc"
          },
          {
            "name": "20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/515055/100/0/threaded"
          },
          {
            "name": "34509",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34509"
          },
          {
            "name": "openssl-asn1-stringprintex-dos(49431)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49431"
          },
          {
            "name": "35181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35181"
          },
          {
            "name": "258048",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1"
          },
          {
            "name": "38834",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38834"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6996",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996"
          },
          {
            "name": "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html"
          },
          {
            "name": "ADV-2010-3126",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/3126"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3865"
          },
          {
            "name": "ADV-2009-1220",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1220"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.openssl.org/news/secadv_20090325.txt"
          },
          {
            "name": "ADV-2009-1548",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1548"
          },
          {
            "name": "36701",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36701"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html"
          },
          {
            "name": "HPSBMA02447",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=125017764422557\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.bluecoat.com/index?page=content\u0026id=SA50"
          },
          {
            "name": "34460",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34460"
          },
          {
            "name": "SSRT090062",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=125017764422557\u0026w=2"
          },
          {
            "name": "34256",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34256"
          },
          {
            "name": "42733",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42733"
          },
          {
            "name": "ADV-2010-0528",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0528"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-03-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SSRT090059",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=124464882609472\u0026w=2"
        },
        {
          "name": "ADV-2009-0850",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0850"
        },
        {
          "name": "1021905",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1021905"
        },
        {
          "name": "34896",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34896"
        },
        {
          "name": "MDVSA-2009:087",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:087"
        },
        {
          "name": "ADV-2009-1175",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1175"
        },
        {
          "name": "42724",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42724"
        },
        {
          "name": "20090403 rPSA-2009-0057-1 m2crypto openssl openssl-scripts",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502429/100/0/threaded"
        },
        {
          "name": "SUSE-SU-2011:0847",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0057"
        },
        {
          "name": "DSA-1763",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1763"
        },
        {
          "name": "38794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38794"
        },
        {
          "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/project/shownotes.php?release_id=671059\u0026group_id=116847"
        },
        {
          "name": "34960",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34960"
        },
        {
          "name": "openSUSE-SU-2011:0845",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057"
        },
        {
          "name": "34666",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34666"
        },
        {
          "name": "USN-750-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-750-1"
        },
        {
          "name": "FreeBSD-SA-09:08",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc"
        },
        {
          "name": "HPSBUX02435",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=124464882609472\u0026w=2"
        },
        {
          "name": "ADV-2009-1020",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1020"
        },
        {
          "name": "35729",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35729"
        },
        {
          "name": "RHSA-2009:1335",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
        },
        {
          "name": "52864",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/52864"
        },
        {
          "name": "34561",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34561"
        },
        {
          "name": "35380",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35380"
        },
        {
          "name": "HPSBOV02540",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=127678688104458\u0026w=2"
        },
        {
          "name": "42467",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42467"
        },
        {
          "name": "APPLE-SA-2009-09-10-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10198",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198"
        },
        {
          "name": "36533",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36533"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/archive/2009.php#id2009-04-08-1"
        },
        {
          "name": "34411",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34411"
        },
        {
          "name": "NetBSD-SA2009-008",
          "tags": [
            "vendor-advisory",
            "x_refsource_NETBSD"
          ],
          "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc"
        },
        {
          "name": "20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/515055/100/0/threaded"
        },
        {
          "name": "34509",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34509"
        },
        {
          "name": "openssl-asn1-stringprintex-dos(49431)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49431"
        },
        {
          "name": "35181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35181"
        },
        {
          "name": "258048",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1"
        },
        {
          "name": "38834",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38834"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6996",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996"
        },
        {
          "name": "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html"
        },
        {
          "name": "ADV-2010-3126",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/3126"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3865"
        },
        {
          "name": "ADV-2009-1220",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1220"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.openssl.org/news/secadv_20090325.txt"
        },
        {
          "name": "ADV-2009-1548",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1548"
        },
        {
          "name": "36701",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36701"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2010-0019.html"
        },
        {
          "name": "HPSBMA02447",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=125017764422557\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.bluecoat.com/index?page=content\u0026id=SA50"
        },
        {
          "name": "34460",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34460"
        },
        {
          "name": "SSRT090062",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=125017764422557\u0026w=2"
        },
        {
          "name": "34256",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34256"
        },
        {
          "name": "42733",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42733"
        },
        {
          "name": "ADV-2010-0528",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0528"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-0590",
    "datePublished": "2009-03-27T16:00:00",
    "dateReserved": "2009-02-13T00:00:00",
    "dateUpdated": "2024-08-07T04:40:04.972Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-7250

Vulnerability from cvelistv5

Published

2012-02-29 11:00

Modified

2024-08-07 20:57

Severity ?

Summary

The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.

References

▼	URL	Tags
	https://bugzilla.novell.com/show_bug.cgi?id=748738	x_refsource_CONFIRM
	http://secunia.com/advisories/48516	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48899	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=openssl-dev&m=115685408414194&w=2	mailing-list, x_refsource_MLIST
	http://www.mail-archive.com/openssl-dev%40openssl.org/msg30305.html	mailing-list, x_refsource_MLIST
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/52181	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1424-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=798100	x_refsource_CONFIRM
	http://cvs.openssl.org/chngview?cn=22144	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2012/02/27/10	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2012/02/28/14	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/48153	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=133728068926468&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=133728068926468&w=2	vendor-advisory, x_refsource_HP

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:57:40.840Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.novell.com/show_bug.cgi?id=748738"
          },
          {
            "name": "48516",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48516"
          },
          {
            "name": "48899",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48899"
          },
          {
            "name": "[openssl-dev] 20060829 Crash inside SMIME_read_PKCS7 if input is not MIME",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=openssl-dev\u0026m=115685408414194\u0026w=2"
          },
          {
            "name": "[openssl-dev] 20120210 [openssl.org #2711] Fix possible NULL dereference on bad MIME headers",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.mail-archive.com/openssl-dev%40openssl.org/msg30305.html"
          },
          {
            "name": "RHSA-2009:1335",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
          },
          {
            "name": "52181",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/52181"
          },
          {
            "name": "36533",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36533"
          },
          {
            "name": "USN-1424-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1424-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=798100"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.openssl.org/chngview?cn=22144"
          },
          {
            "name": "[oss-security] 20120227 CVE request: openssl: null pointer dereference issue",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2012/02/27/10"
          },
          {
            "name": "[oss-security] 20120228 Re: CVE request: openssl: null pointer dereference issue",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2012/02/28/14"
          },
          {
            "name": "48153",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48153"
          },
          {
            "name": "HPSBUX02782",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133728068926468\u0026w=2"
          },
          {
            "name": "SSRT100844",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133728068926468\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-08-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-05T18:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.novell.com/show_bug.cgi?id=748738"
        },
        {
          "name": "48516",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48516"
        },
        {
          "name": "48899",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48899"
        },
        {
          "name": "[openssl-dev] 20060829 Crash inside SMIME_read_PKCS7 if input is not MIME",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=openssl-dev\u0026m=115685408414194\u0026w=2"
        },
        {
          "name": "[openssl-dev] 20120210 [openssl.org #2711] Fix possible NULL dereference on bad MIME headers",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.mail-archive.com/openssl-dev%40openssl.org/msg30305.html"
        },
        {
          "name": "RHSA-2009:1335",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
        },
        {
          "name": "52181",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/52181"
        },
        {
          "name": "36533",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36533"
        },
        {
          "name": "USN-1424-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1424-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=798100"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.openssl.org/chngview?cn=22144"
        },
        {
          "name": "[oss-security] 20120227 CVE request: openssl: null pointer dereference issue",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2012/02/27/10"
        },
        {
          "name": "[oss-security] 20120228 Re: CVE request: openssl: null pointer dereference issue",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2012/02/28/14"
        },
        {
          "name": "48153",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48153"
        },
        {
          "name": "HPSBUX02782",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133728068926468\u0026w=2"
        },
        {
          "name": "SSRT100844",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133728068926468\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2006-7250",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.novell.com/show_bug.cgi?id=748738",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.novell.com/show_bug.cgi?id=748738"
            },
            {
              "name": "48516",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48516"
            },
            {
              "name": "48899",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48899"
            },
            {
              "name": "[openssl-dev] 20060829 Crash inside SMIME_read_PKCS7 if input is not MIME",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=openssl-dev\u0026m=115685408414194\u0026w=2"
            },
            {
              "name": "[openssl-dev] 20120210 [openssl.org #2711] Fix possible NULL dereference on bad MIME headers",
              "refsource": "MLIST",
              "url": "http://www.mail-archive.com/openssl-dev@openssl.org/msg30305.html"
            },
            {
              "name": "RHSA-2009:1335",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
            },
            {
              "name": "52181",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/52181"
            },
            {
              "name": "36533",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36533"
            },
            {
              "name": "USN-1424-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1424-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=798100",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=798100"
            },
            {
              "name": "http://cvs.openssl.org/chngview?cn=22144",
              "refsource": "CONFIRM",
              "url": "http://cvs.openssl.org/chngview?cn=22144"
            },
            {
              "name": "[oss-security] 20120227 CVE request: openssl: null pointer dereference issue",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2012/02/27/10"
            },
            {
              "name": "[oss-security] 20120228 Re: CVE request: openssl: null pointer dereference issue",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2012/02/28/14"
            },
            {
              "name": "48153",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48153"
            },
            {
              "name": "HPSBUX02782",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=133728068926468\u0026w=2"
            },
            {
              "name": "SSRT100844",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=133728068926468\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-7250",
    "datePublished": "2012-02-29T11:00:00",
    "dateReserved": "2011-12-19T00:00:00",
    "dateUpdated": "2024-08-07T20:57:40.840Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-1386

Vulnerability from cvelistv5

Published

2009-06-04 16:00

Modified

2024-08-07 05:13

Severity ?

Summary

ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.

References

▼	URL	Tags
	http://secunia.com/advisories/38794	third-party-advisory, x_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/35729	third-party-advisory, x_refsource_SECUNIA
	http://cvs.openssl.org/chngview?cn=17369	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2009/06/02/1	mailing-list, x_refsource_MLIST
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-792-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469	vdb-entry, signature, x_refsource_OVAL
	http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest	x_refsource_CONFIRM
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://secunia.com/advisories/38834	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/50963	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	https://www.exploit-db.com/exploits/8873	exploit, x_refsource_EXPLOIT-DB
	http://secunia.com/advisories/35571	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/35174	vdb-entry, x_refsource_BID
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://www.vupen.com/english/advisories/2010/0528	vdb-entry, x_refsource_VUPEN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:13:25.487Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "38794",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38794"
          },
          {
            "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
          },
          {
            "name": "35729",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35729"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.openssl.org/chngview?cn=17369"
          },
          {
            "name": "[oss-security] 20090602 Re: Two OpenSSL DTLS remote DoS",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/06/02/1"
          },
          {
            "name": "RHSA-2009:1335",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
          },
          {
            "name": "HPSBMA02492",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
          },
          {
            "name": "36533",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36533"
          },
          {
            "name": "oval:org.mitre.oval:def:11179",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179"
          },
          {
            "name": "USN-792-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-792-1"
          },
          {
            "name": "oval:org.mitre.oval:def:7469",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://rt.openssl.org/Ticket/Display.html?id=1679\u0026user=guest\u0026pass=guest"
          },
          {
            "name": "NetBSD-SA2009-009",
            "tags": [
              "vendor-advisory",
              "x_refsource_NETBSD",
              "x_transferred"
            ],
            "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc"
          },
          {
            "name": "38834",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38834"
          },
          {
            "name": "openssl-changecipherspec-dos(50963)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50963"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "8873",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/8873"
          },
          {
            "name": "35571",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35571"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "35174",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35174"
          },
          {
            "name": "SSRT100079",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
          },
          {
            "name": "ADV-2010-0528",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0528"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-06-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "38794",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38794"
        },
        {
          "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
        },
        {
          "name": "35729",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35729"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.openssl.org/chngview?cn=17369"
        },
        {
          "name": "[oss-security] 20090602 Re: Two OpenSSL DTLS remote DoS",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/06/02/1"
        },
        {
          "name": "RHSA-2009:1335",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1335.html"
        },
        {
          "name": "HPSBMA02492",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
        },
        {
          "name": "36533",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36533"
        },
        {
          "name": "oval:org.mitre.oval:def:11179",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179"
        },
        {
          "name": "USN-792-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-792-1"
        },
        {
          "name": "oval:org.mitre.oval:def:7469",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://rt.openssl.org/Ticket/Display.html?id=1679\u0026user=guest\u0026pass=guest"
        },
        {
          "name": "NetBSD-SA2009-009",
          "tags": [
            "vendor-advisory",
            "x_refsource_NETBSD"
          ],
          "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc"
        },
        {
          "name": "38834",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38834"
        },
        {
          "name": "openssl-changecipherspec-dos(50963)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50963"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "8873",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/8873"
        },
        {
          "name": "35571",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35571"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "35174",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35174"
        },
        {
          "name": "SSRT100079",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444"
        },
        {
          "name": "ADV-2010-0528",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0528"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-1386",
    "datePublished": "2009-06-04T16:00:00",
    "dateReserved": "2009-04-23T00:00:00",
    "dateUpdated": "2024-08-07T05:13:25.487Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags