Skip to content
OpenAdvisories
Unscored RHSA-2009:1335 7 CVEs

Red Hat Security Advisory: openssl security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client openssl 0:0.9.8e-12.el5
Red Hat · RHEL 5 enterprise_linux:5::client openssl-debuginfo 0:0.9.8e-12.el5
Red Hat · RHEL 5 enterprise_linux:5::client openssl-perl 0:0.9.8e-12.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openssl 0:0.9.8e-12.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openssl-debuginfo 0:0.9.8e-12.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openssl-devel 0:0.9.8e-12.el5
Red Hat · RHEL 5 enterprise_linux:5::server openssl 0:0.9.8e-12.el5
Red Hat · RHEL 5 enterprise_linux:5::server openssl-debuginfo 0:0.9.8e-12.el5
Red Hat · RHEL 5 enterprise_linux:5::server openssl-devel 0:0.9.8e-12.el5
Red Hat · RHEL 5 enterprise_linux:5::server openssl-perl 0:0.9.8e-12.el5

Vulnerabilities 7

  • Unscored —
    CVE-2006-7250

    The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a de…

    openssl Debian
  • Unscored —
    CVE-2009-0590

    The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invali…

    openssl Debian
  • Unscored —
    CVE-2009-1377 EPSS 11%

    The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers t…

    openssl Debian
  • Unscored —
    CVE-2009-1378 EPSS 13%

    Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0…

    openssl Debian
  • Unscored —
    CVE-2009-1379 Public exploit EPSS 18%

    Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 …

    openssl Debian
  • Unscored —
    CVE-2009-1386 Public exploit EPSS 80%

    ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference an…

    openssl Debian
  • Unscored —
    CVE-2009-1387 EPSS 10%

    The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers t…

    openssl Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=479817
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492304
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=501253
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=501254
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=501572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503685
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503688
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1335.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-7250
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=798100
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-7250
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-7250
  • report
    https://access.redhat.com/security/cve/CVE-2009-0590
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0590
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0590
  • report
    https://access.redhat.com/security/cve/CVE-2009-1377
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1377
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1377
  • report
    https://access.redhat.com/security/cve/CVE-2009-1378
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1378
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1378
  • report
    https://access.redhat.com/security/cve/CVE-2009-1379
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1379
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1379
  • report
    https://access.redhat.com/security/cve/CVE-2009-1386
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1386
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1386
  • report
    https://access.redhat.com/security/cve/CVE-2009-1387
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1387
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1387