Skip to content
OpenAdvisories
Critical RHSA-2010:0440 2 CVEs

Red Hat Security Advisory: rhev-hypervisor security and bug fix update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::hypervisor rhev-hypervisor 0:5.4-2.1.12.1.el5_4rhev2_1
Red Hat · RHEL 5 enterprise_linux:5::hypervisor rhev-hypervisor-pxe 0:5.4-2.1.12.1.el5_4rhev2_1

Vulnerabilities 2

  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  • Unscored —
    CVE-2009-3245

    OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, …

    openssl Debian

References

  • article
    http://www.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533125
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=570924
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0440.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-3245
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3245
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3245
  • report
    https://access.redhat.com/security/cve/CVE-2009-3555
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3555
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3555