CVE-2009-4355

Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to…

published January 14, 2010

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09184 · 95.3th percentile
Published
2010-01-14T19:00Z
EPSS history
Timeline
  • 14 JAN 19:00Z
    Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to…
    cvelistv5