OpenSSL prior to 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
openssl openssl 0.9.8j |
||
openssl openssl 0.9.8i |
||
openssl openssl 0.9.8a |
||
openssl openssl 0.9.8 |
||
openssl openssl 0.9.8e |
||
openssl openssl 0.9.8d |
||
openssl openssl |
||
openssl openssl 0.9.8k |
||
openssl openssl 0.9.8c |
||
openssl openssl 0.9.8b |
||
openssl openssl 0.9.8h |
||
openssl openssl 0.9.8g |
||
openssl openssl 0.9.8f |
Vulmon