1. Home
  2. CVE Database
  3. CVE-2008-5410
HIGH · 7.8

CVE-2008-5410

The PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denia...

Vulnerability Description

The PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denial of service (failed cryptographic operations) via unspecified vectors, related to the (1) RSA_sign and (2) RSA_verify functions.

CVSS Score

7.8

HIGH

AV:N/AC:L/Au:N/C:N/I:N/A:C
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE

Affected Products

VendorProductVersions
SunSolaris10.0

Related Weaknesses (CWE)

CWE-310

References

FAQ

What is CVE-2008-5410?

CVE-2008-5410 is a vulnerability with a CVSS score of 7.8 (HIGH). The PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denia...

How severe is CVE-2008-5410?

CVE-2008-5410 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2008-5410?

Check the references section above for vendor advisories and patch information. Affected products include: Sun Solaris.