vulnwire
5.8med

CVE-2008-5077

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to byp…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
5.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
5.1%
percentile 92%
Public exploits
0
none known

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.

Exploit prediction (EPSS)

5.15% probability of exploitation in the next 30 days, higher than 92% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.05.8AV:N/AC:M/Au:N/C:N/I:P/A:P

Classification

Weakness
  • CWE-20 Improper Input Validation
Technology feeds
OpenSSL (RSS, critical only)

References

  • marc.info /?l=bugtraq&m=123859864430555&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • vmware.com /security/advisories/VMSA-2009-0004.html · x_refsource_CONFIRM, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2011-07/msg00014.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • support.apple.com /kb/HT3549 · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /archive/1/499827/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-66-250826-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • openssl.org /news/secadv_20090107.txt · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2009/0558 · vdb-entry, x_refsource_VUPEN, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2011-07/msg00013.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • securitytracker.com /id?1021523 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • vupen.com /english/advisories/2009/0362 · vdb-entry, x_refsource_VUPEN, x_transferred
  • security.gentoo.org /glsa/glsa-200902-02.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • marc.info /?l=bugtraq&m=124277349419254&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • vupen.com /english/advisories/2009/0289 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/35074 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2009-038.htm · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/34211 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2009/0040 · vdb-entry, x_refsource_VUPEN, x_transferred
  • marc.info /?l=bugtraq&m=127678688104458&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • lists.apple.com /archives/security-announce/2009/May/msg00002.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • slackware.com /security/viewer.php?l=slackware-security&y=2009&m=slackware-security.544796 · vendor-advisory, x_refsource_SLACKWARE, x_transferred
  • vupen.com /english/advisories/2009/0904 · vdb-entry, x_refsource_VUPEN, x_transferred
  • vupen.com /english/advisories/2009/0913 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/33557 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/33765 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • ocert.org /advisories/ocert-2008-016.html · x_refsource_MISC, x_transferred
  • secunia.com /advisories/33673 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/502322/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/33436 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/35108 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • us-cert.gov /cas/techalerts/TA09-133A.html · third-party-advisory, x_refsource_CERT, x_transferred
  • support.nortel.com /go/main.jsp?cscat=BLTNDETAIL&id=837653 · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/33150 · vdb-entry, x_refsource_BID, x_transferred
  • redhat.com /support/errata/RHSA-2009-0004.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • vupen.com /english/advisories/2009/1297 · vdb-entry, x_refsource_VUPEN, x_transferred
  • usn.ubuntu.com /704-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • secunia.com /advisories/33338 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2009/1338 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/33394 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • voodoo-circle.sourceforge.net /sa/sa-20090123-01.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/39005 · Vendor Advisory

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.