// For flags

CVE-2009-3245

openssl: missing bn_wexpand return value checks

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.

OpenSSL en versiones anterioes a v0.9.8m cuando recibe un valor de retorno NULL de la funcion bn_wexpand hace una llamada a (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, y (4) engines/e_ubsec.c, lo que tiene un impacto inespecifico y vectores de ataque dependientes del contexto.

ABB HMI uses outdated software components that are statically linked into the firmware files and service binaries. These components have documented vulnerabilities and should be updated and replaced. It was possible to identify severally outdated OpenSSL (version 0.9.8g) and ABYSS HTTP (version 0.4) server components.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
Attack Vector
Network
Attack Complexity
High
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2009-09-18 CVE Reserved
  • 2010-03-05 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-04-04 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
  • CWE-476: NULL Pointer Dereference
CAPEC
References (36)
URL Tag Source
http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc X_refsource_confirm
http://packetstormsecurity.com/files/153392/ABB-HMI-Outdated-Software-Components.html X_refsource_misc
http://secunia.com/advisories/37291 Third Party Advisory
http://secunia.com/advisories/39461 Third Party Advisory
http://secunia.com/advisories/39932 Third Party Advisory
http://secunia.com/advisories/42724 Third Party Advisory
http://secunia.com/advisories/42733 Third Party Advisory
http://support.apple.com/kb/HT4723 X_refsource_confirm
http://www.securityfocus.com/bid/38562 Vdb Entry
http://www.vupen.com/english/advisories/2010/0839 Vdb Entry
http://www.vupen.com/english/advisories/2010/0916 Vdb Entry
http://www.vupen.com/english/advisories/2010/0933 Vdb Entry
http://www.vupen.com/english/advisories/2010/1216 Vdb Entry
https://kb.bluecoat.com/index?page=content&id=SA50 X_refsource_confirm
https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html Mailing List
https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html Mailing List
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11738 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6640 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9790 Signature
URL Date SRC
URL Date SRC
http://marc.info/?l=openssl-cvs&m=126692159706582&w=2 2017-09-19
http://marc.info/?l=openssl-cvs&m=126692170906712&w=2 2017-09-19
http://marc.info/?l=openssl-cvs&m=126692180606861&w=2 2017-09-19
URL Date SRC
http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html 2017-09-19
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html 2017-09-19
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html 2017-09-19
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html 2017-09-19
http://marc.info/?l=bugtraq&m=127128920008563&w=2 2017-09-19
http://marc.info/?l=bugtraq&m=127678688104458&w=2 2017-09-19
http://secunia.com/advisories/38761 2017-09-19
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049 2017-09-19
http://www.mandriva.com/security/advisories?name=MDVSA-2010:076 2017-09-19
http://www.redhat.com/support/errata/RHSA-2010-0977.html 2017-09-19
http://www.redhat.com/support/errata/RHSA-2011-0896.html 2017-09-19
http://www.ubuntu.com/usn/USN-1003-1 2017-09-19
https://access.redhat.com/security/cve/CVE-2009-3245 2011-06-22
https://bugzilla.redhat.com/show_bug.cgi?id=570924 2011-06-22
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 <= 0.9.8l
Search vendor "Openssl" for product "Openssl" and version " <= 0.9.8l"
-
Affected
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 0.9.8
Search vendor "Openssl" for product "Openssl" and version "0.9.8"
-
Affected
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 0.9.8a
Search vendor "Openssl" for product "Openssl" and version "0.9.8a"
-
Affected
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 0.9.8b
Search vendor "Openssl" for product "Openssl" and version "0.9.8b"
-
Affected
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 0.9.8c
Search vendor "Openssl" for product "Openssl" and version "0.9.8c"
-
Affected
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 0.9.8d
Search vendor "Openssl" for product "Openssl" and version "0.9.8d"
-
Affected
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 0.9.8e
Search vendor "Openssl" for product "Openssl" and version "0.9.8e"
-
Affected
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 0.9.8f
Search vendor "Openssl" for product "Openssl" and version "0.9.8f"
-
Affected
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 0.9.8g
Search vendor "Openssl" for product "Openssl" and version "0.9.8g"
-
Affected
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 0.9.8h
Search vendor "Openssl" for product "Openssl" and version "0.9.8h"
-
Affected
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 0.9.8i
Search vendor "Openssl" for product "Openssl" and version "0.9.8i"
-
Affected
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 0.9.8j
Search vendor "Openssl" for product "Openssl" and version "0.9.8j"
-
Affected
Openssl
Search vendor "Openssl"
 Openssl
Search vendor "Openssl" for product "Openssl"
 0.9.8k
Search vendor "Openssl" for product "Openssl" and version "0.9.8k"
-
Affected