Lucene search

K
cvelistMitreCVELIST:CVE-2009-0128
HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-0128

2022-10-0316:24:11
mitre
www.cve.org
slurm ssl/tls certificatevalidation bypass

7.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

plugins/crypto/openssl/crypto_openssl.c in Simple Linux Utility for Resource Management (aka SLURM or slurm-llnl) does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.