Description
OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 0.9.8m-1 | — |
| Debian 13 | openssl | 0.9.8m-1 | — |
| Debian 12 | openssl | 0.9.8m-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | openssl +2 | 0.9.8e-12.el5_4.6 | RHSA-2010:0162 |
| RHEL 5 | rhev-hypervisor +1 | 5.4-2.1.12.1.el5_4rhev2_1 | RHSA-2010:0440 |
| RHEL 4 | openssl +2 | 0.9.7a-43.17.el4_8.6 | RHSA-2010:0977 |
| RHEL 4 | openssl096b | 0.9.6b-22.46.el4_8.1 | RHSA-2010:0173 |
| RHEL 3 | openssl096b | 0.9.6b-16.50 | RHSA-2010:0173 |
Advisories 4
- RHSA-2010:0977 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0440 Red Hat Security Advisory: rhev-hypervisor security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0173 Red Hat Security Advisory: openssl096b security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0162 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- ADV-2010-0916 vdb-entry
- 42724 third-party-advisory
- oval:org.mitre.oval:def:11738 vdb-entry signature
- 39461 third-party-advisory
- [openssl-cvs] 20100223 OpenSSL: OpenSSL_1_0_0-stable: openssl/crypto/bn/ bn_div.c bn_gf... mailing-list
- http://support.apple.com/kb/HT4723
- FEDORA-2010-5357 vendor-advisory
- SSA:2010-060-02 vendor-advisory
- APPLE-SA-2011-06-23-1 vendor-advisory
- oval:org.mitre.oval:def:6640 vdb-entry signature
- HPSBOV02540 vendor-advisory
- [openssl-cvs] 20100223 OpenSSL: openssl/crypto/bn/ bn_div.c bn_gf2m.c openssl/crypto/ec... mailing-list
- 38761 third-party-advisory
- SUSE-SR:2010:013 vendor-advisory
- 38562 vdb-entry
- [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released mailing-list
- oval:org.mitre.oval:def:9790 vdb-entry signature
- [openssl-cvs] 20100223 OpenSSL: OpenSSL_0_9_8-stable: openssl/ CHANGES openssl/crypto/b... mailing-list
- RHSA-2010:0977 vendor-advisory
- ADV-2010-0839 vdb-entry
- MDVSA-2010:076 vendor-advisory
- HPSBUX02517 vendor-advisory
- [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released mailing-list
- USN-1003-1 vendor-advisory
- 39932 third-party-advisory
- ADV-2010-0933 vdb-entry
- RHSA-2011:0896 vendor-advisory
- https://kb.bluecoat.com/index?page=content&id=SA50
- ADV-2010-1216 vdb-entry
- 42733 third-party-advisory
- 37291 third-party-advisory
- FEDORA-2010-5744 vendor-advisory
- http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc
- http://packetstormsecurity.com/files/153392/ABB-HMI-Outdated-Software-Components.html