CVE-2009-0590
EPSS 10.0%openssl openssl097 - denial of service
發布日:2009/3/27修改日:2026/4/28
也稱為:DEBIAN-CVE-2009-0590
描述
The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.
受影響套件(3)
- Debian/opensslfrom 0, < 0.9.8g-16
- Debian/opensslfrom 0, < 0.9.8c-4etch5
- Debian/openssl097from 0, < 0.9.7k-3.1etch3