NVD

Id
51478  
Name
CVE-2009-4355  
Description
Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2010-01-14  
Modified Date
2016-08-22  
Seq
2009-4355  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261119 51478 CVE-2009-4355 http://cvs.openssl.org/chngview?cn=19068  View
261120 51478 CVE-2009-4355 http://cvs.openssl.org/chngview?cn=19069  View
261121 51478 CVE-2009-4355 http://cvs.openssl.org/chngview?cn=19167  View
261122 51478 CVE-2009-4355 FEDORA-2010-5744  View
261123 51478 CVE-2009-4355 FEDORA-2010-5357  View
261124 51478 CVE-2009-4355 SUSE-SA:2010:008  View
261125 51478 CVE-2009-4355 SSRT100058  View
261126 51478 CVE-2009-4355 oval:org.mitre.oval:def:11260  View
261127 51478 CVE-2009-4355 oval:org.mitre.oval:def:12168  View
261128 51478 CVE-2009-4355 oval:org.mitre.oval:def:6678  View
261129 51478 CVE-2009-4355 SSA:2010-060-02  View
261130 51478 CVE-2009-4355 http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0004  View
261131 51478 CVE-2009-4355 DSA-1970  View
261132 51478 CVE-2009-4355 MDVSA-2010:022  View
261133 51478 CVE-2009-4355 [oss-security] 20100113 [PATCH] memory consumption (DoS) in openssl CVE-2009-4355  View
261134 51478 CVE-2009-4355 USN-884-1  View
261135 51478 CVE-2009-4355 ADV-2010-0124  View
261136 51478 CVE-2009-4355 ADV-2010-0839  View
261137 51478 CVE-2009-4355 ADV-2010-0916  View
261138 51478 CVE-2009-4355 https://bugzilla.redhat.com/show_bug.cgi?id=546707  View
261139 51478 CVE-2009-4355 https://issues.rpath.com/browse/RPL-3157  View
261140 51478 CVE-2009-4355 https://kb.bluecoat.com/index?page=content&id=SA50  View
261141 51478 CVE-2009-4355 RHSA-2010:0095  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35242 JVNDB-2010-001022 OpenSSL の zlib_stateful_finish 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の crypto/comp/c_zlib.c の zlib_stateful_finish 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-4355 41786 CVE-2009-4355 51478 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001022.html 2010-01-13 2010-05-13 View