OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Apply OS X security update 2011-004 | Aug 28, 2015 | Mar 5, 2010 |
| Apple Osx Openssl | — | Upgrade macOS to the latest version | Dec 16, 2011 | Mar 5, 2010 |
| Centos_linux | — | Upgrade opensslUpgrade openssl-develUpgrade openssl-perlUpgrade openssl096b | Dec 1, 2016 | Mar 5, 2010 |
| Debian | — | Upgrade openssl | Jul 30, 2024 | Mar 5, 2010 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 14, 2014 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Oct 30, 2017 | Mar 5, 2010 |
| Hpux | — | Update openssl.OPENSSL-RUN to the latest versionUpdate openssl.OPENSSL-CER to the latest versionUpdate openssl.OPENSSL-PVT to the latest versionUpdate openssl.OPENSSL-DOC to the latest versionUpdate openssl.OPENSSL-PRNG to the latest versionUpdate openssl.OPENSSL-CONF to the latest versionUpdate openssl.OPENSSL-LIB to the latest versionUpdate openssl.OPENSSL-SRC to the latest versionUpdate openssl.OPENSSL-MIS to the latest versionUpdate openssl.OPENSSL-MAN to the latest versionUpdate openssl.OPENSSL-INC to the latest version | Aug 11, 2017 | Mar 5, 2010 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Sep 16, 2010 | Mar 5, 2010 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory | Nov 30, 2017 | Mar 5, 2010 |
| Oracle_linux | — | Upgrade opensslUpgrade openssl-develUpgrade openssl-perl | Oct 16, 2024 | Mar 5, 2010 |
| Suse | — | Upgrade libopenssl0_9_8-hmac-32bitUpgrade libopenssl0_9_8-hmacUpgrade libopenssl-develUpgrade opensslUpgrade libopenssl0_9_8-32bitUpgrade libopenssl0_9_8Upgrade openssl-docUpgrade libopenssl0_9_8-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libssl0.9.8 | Nov 8, 2024 | Mar 5, 2010 |
| Vmsa 2010 0015 | — | Upgrade VMware ESX 4.0 to build number 294855Upgrade VMware ESX 4.1 to build number 320092 | Nov 19, 2010 | Mar 5, 2010 |
| Vmsa 2010 0018 | — | Apply ESX400-201009401-SG. | Feb 16, 2011 | Mar 5, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub