The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade opensslUpgrade openssl-develUpgrade openssl-perl | Dec 1, 2016 | Mar 27, 2009 |
| Debian | — | Upgrade openssl | Jul 30, 2024 | Mar 27, 2009 |
| Freebsd | — | Upgrade FreeBSD | Dec 10, 2025 | May 7, 2009 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Oct 30, 2017 | Mar 27, 2009 |
| Hpux | — | Update openssl.OPENSSL-MIS to the latest versionUpdate openssl.OPENSSL-INC to the latest versionUpdate fips_1_1_2.FIPS-SRC to the latest versionUpdate fips_1_1_2.FIPS-DOC to the latest versionUpdate openssl.OPENSSL-MAN to the latest versionUpdate fips_1_1_2.FIPS-MIS to the latest versionUpdate fips_1_2.FIPS-DOC to the latest versionUpdate openssl.OPENSSL-LIB to the latest versionUpdate fips_1_2.FIPS-MAN to the latest versionUpdate openssl.OPENSSL-DOC to the latest versionUpdate fips_1_2.FIPS-LIB to the latest versionUpdate fips_1_1_2.FIPS-CONF to the latest versionUpdate fips_1_1_2.FIPS-RUN to the latest versionUpdate fips_1_1_2.FIPS-LIB to the latest versionUpdate fips_1_1_2.FIPS-MAN to the latest versionUpdate openssl.OPENSSL-SRC to the latest versionUpdate fips_1_2.FIPS-INC to the latest versionUpdate openssl.OPENSSL-PRNG to the latest versionUpdate fips_1_1_2.FIPS-INC to the latest versionUpdate fips_1_2.FIPS-CONF to the latest versionUpdate fips_1_2.FIPS-SRC to the latest versionUpdate openssl.OPENSSL-CER to the latest versionUpdate fips_1_2.FIPS-RUN to the latest versionUpdate fips_1_2.FIPS-MIS to the latest versionUpdate openssl.OPENSSL-RUN to the latest versionUpdate openssl.OPENSSL-PVT to the latest versionUpdate openssl.OPENSSL-CONF to the latest version | Aug 11, 2017 | Mar 27, 2009 |
| Oracle_linux | — | Upgrade openssl-perlUpgrade opensslUpgrade openssl-devel | Oct 16, 2024 | Mar 27, 2009 |
| Suse | — | Upgrade opensslUpgrade libopenssl1_0_0Upgrade openssl-docUpgrade libopenssl1_0_0-hmac-32bitUpgrade openssl-1_0_0Upgrade libopenssl1_0_0-32bitUpgrade libopenssl1_0_0-hmacUpgrade libopenssl1_1-hmac-32bitUpgrade libopenssl-1_0_0-develUpgrade libopenssl0_9_8Upgrade libopenssl-1_1-devel-32bitUpgrade libopenssl1_1Upgrade libopenssl1_1-32bitUpgrade libopenssl1-develUpgrade libopenssl0_9_8-hmacUpgrade openssl-1_0_0-docUpgrade libopenssl-fips-providerUpgrade openssl1-docUpgrade openssl1Upgrade libopenssl1_1-hmacUpgrade libopenssl0_9_8-32bitUpgrade libopenssl-develUpgrade openssl-1_1Upgrade libopenssl-1_1-develUpgrade libopenssl0_9_8-hmac-32bitUpgrade libopenssl0_9_8-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libssl0.9.8 | Nov 8, 2024 | Mar 27, 2009 |
| Vmsa 2010 0009 1 Service Console Package Openssl | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Mar 27, 2009 |
| Vmsa 2010 0019 | — | Upgrade VMware ESX 3.5 to build number 317866 | Feb 16, 2011 | Mar 27, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub