NVD

Id
50450  
Name
CVE-2009-3245  
Description
OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-03-05  
Modified Date
2016-08-22  
Seq
2009-3245  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
255213 50450 CVE-2009-3245 http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc  View
255214 50450 CVE-2009-3245 APPLE-SA-2011-06-23-1  View
255215 50450 CVE-2009-3245 FEDORA-2010-5744  View
255216 50450 CVE-2009-3245 FEDORA-2010-5357  View
255217 50450 CVE-2009-3245 SUSE-SR:2010:013  View
255218 50450 CVE-2009-3245 SSRT100058  View
255219 50450 CVE-2009-3245 HPSBOV02540  View
255220 50450 CVE-2009-3245 [openssl-cvs] 20100223 OpenSSL: OpenSSL_1_0_0-stable: openssl/crypto/bn/ bn_div.c bn_gf...  View
255221 50450 CVE-2009-3245 [openssl-cvs] 20100223 OpenSSL: openssl/crypto/bn/ bn_div.c bn_gf2m.c openssl/crypto/ec...  View
255222 50450 CVE-2009-3245 [openssl-cvs] 20100223 OpenSSL: OpenSSL_0_9_8-stable: openssl/ CHANGES openssl/crypto/b...  View
255223 50450 CVE-2009-3245 oval:org.mitre.oval:def:11738  View
255224 50450 CVE-2009-3245 oval:org.mitre.oval:def:6640  View
255225 50450 CVE-2009-3245 oval:org.mitre.oval:def:9790  View
255226 50450 CVE-2009-3245 SSA:2010-060-02  View
255227 50450 CVE-2009-3245 http://support.apple.com/kb/HT4723  View
255228 50450 CVE-2009-3245 MDVSA-2010:076  View
255229 50450 CVE-2009-3245 RHSA-2010:0977  View
255230 50450 CVE-2009-3245 RHSA-2011:0896  View
255231 50450 CVE-2009-3245 38562  View
255232 50450 CVE-2009-3245 USN-1003-1  View
255233 50450 CVE-2009-3245 ADV-2010-0839  View
255234 50450 CVE-2009-3245 ADV-2010-0916  View
255235 50450 CVE-2009-3245 ADV-2010-0933  View
255236 50450 CVE-2009-3245 ADV-2010-1216  View
255237 50450 CVE-2009-3245 https://kb.bluecoat.com/index?page=content&id=SA50  View
255238 50450 CVE-2009-3245 [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released  View
255239 50450 CVE-2009-3245 [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35449 JVNDB-2010-001229 OpenSSL における複数の関数に関する脆弱性 OpenSSL には、crypto/bn/bn_div.c、crypto/bn/bn_gf2m.c、crypto/ec/ec2_smpl.c、engines/e_ubsec.c の bn_wexpand 関数の呼び出しにおいて NULL の戻り値をチェックできないため、詳細不明な脆弱性が存在します。 CVE-2009-3245 40676 CVE-2009-3245 50450 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001229.html 2010-03-05 2012-10-01 View