CVE-2009-4355

CVE-2009-4355

Publicada em · Atualizada em

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 9.2%
probabilidade de exploração
9.2%top 5% das CVEs
exploração observada
nãonenhuma fonte reporta
Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.
Produtos afetados
n/a · n/a
Referências
http://cvs.openssl.org/chngview?cn=19068http://cvs.openssl.org/chngview?cn=19069http://cvs.openssl.org/chngview?cn=19167http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.htmlhttp://marc.info/?l=bugtraq&m=127128920008563&w=2https://bugzilla.redhat.com/show_bug.cgi?id=546707http://secunia.com/advisories/38175http://secunia.com/advisories/38181http://secunia.com/advisories/38200http://secunia.com/advisories/38761