CVE-2009-0590

Published: Mar 27, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.

Affected (3)

Products: Openssl: Openssl · Debian: Debian Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Before 0.9.8k

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0
Debian Debian Linux	Version 5.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (120)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc (unsafe URL)

Source: secalert@redhat.com

Third Party Advisory

http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.vmware.com/pipermail/security-announce/2010/000082.html

Source: secalert@redhat.com

Third Party Advisory

http://marc.info/?l=bugtraq&m=124464882609472&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=125017764422557&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=127678688104458&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/34411

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/34460

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/34509

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/34561

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/34666

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/34896

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/34960

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/35065

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/35181

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/35380

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/35729

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/36533

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/36701

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/38794

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/38834

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/42467

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/42724

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/42733

Source: secalert@redhat.com

Third Party Advisory

http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc

Source: secalert@redhat.com

Third Party Advisory

http://securitytracker.com/id?1021905

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847

Source: secalert@redhat.com

PatchThird Party Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1

Source: secalert@redhat.com

Broken Link

http://support.apple.com/kb/HT3865

Source: secalert@redhat.com

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm

Source: secalert@redhat.com

Third Party Advisory

http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html

Source: secalert@redhat.com

Third Party Advisory

http://wiki.rpath.com/Advisories:rPSA-2009-0057

Source: secalert@redhat.com

Broken Link

http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057

Source: secalert@redhat.com

Broken Link

http://www.debian.org/security/2009/dsa-1763

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2009:087

Source: secalert@redhat.com

Third Party Advisory

http://www.openssl.org/news/secadv_20090325.txt

Source: secalert@redhat.com

Vendor Advisory

http://www.osvdb.org/52864

Source: secalert@redhat.com

Broken Link

http://www.php.net/archive/2009.php#id2009-04-08-1

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2009-1335.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/502429/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/515055/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/34256

Source: secalert@redhat.com

PatchThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-750-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2010-0019.html

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2009/0850

Source: secalert@redhat.com

Permissions Required

http://www.vupen.com/english/advisories/2009/1020

Source: secalert@redhat.com

Permissions Required

http://www.vupen.com/english/advisories/2009/1175

Source: secalert@redhat.com

Permissions Required

http://www.vupen.com/english/advisories/2009/1220

Source: secalert@redhat.com

Permissions Required

http://www.vupen.com/english/advisories/2009/1548

Source: secalert@redhat.com

Permissions Required

http://www.vupen.com/english/advisories/2010/0528

Source: secalert@redhat.com

Permissions Required

http://www.vupen.com/english/advisories/2010/3126

Source: secalert@redhat.com

Permissions Required

https://exchange.xforce.ibmcloud.com/vulnerabilities/49431

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://kb.bluecoat.com/index?page=content&id=SA50

Source: secalert@redhat.com

Third Party Advisory

https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html

Source: secalert@redhat.com

Third Party Advisory

https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html

Source: secalert@redhat.com

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198

Source: secalert@redhat.com

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996

Source: secalert@redhat.com

Third Party Advisory

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc (unsafe URL)