CVE catalog

CVE-2009-0129

libcrypt-openssl-dsa-perl: CVE-2009-0129

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.12% · Oct 25, 2026

libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibcrypt-openssl-dsa-perlsid0.20-3fixed
Debianlibcrypt-openssl-dsa-perlforky0.20-3fixed
Debianlibcrypt-openssl-dsa-perltrixie0.20-3fixed
Debianlibcrypt-openssl-dsa-perlbookworm0.20-3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibcrypt-openssl-dsa-perlsourcesid0.13-4not yet assignedNot reported[511519]
Debianlibcrypt-openssl-dsa-perlsourceforky0.13-4not yet assignedNot reported[511519]
Debianlibcrypt-openssl-dsa-perlsourcetrixie0.13-4not yet assignedNot reported[511519]
Debianlibcrypt-openssl-dsa-perlsourcebookworm0.13-4not yet assignedNot reported[511519]

[Debian bug #511519]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libcrypt-openssl-dsa-perl]Fixed
    Details (2)

    • 0.20-3 · amd64 · bookworm

      Fixed · Fixed: 0.13-4

      dsa · libcrypt-openssl-dsa-perl · debian · bookworm; dsa · libcrypt-openssl-dsa-perl · debian · 12

    • 0.20-3 · arm64 · bookworm

      Fixed · Fixed: 0.13-4

      dsa · libcrypt-openssl-dsa-perl · debian · bookworm; dsa · libcrypt-openssl-dsa-perl · debian · 12

[Debian 13 (Trixie)]

  • [libcrypt-openssl-dsa-perl]Fixed

    Source package: [libcrypt-openssl-dsa-perl]

    Details (2)

    • 0.20-3+b3 · amd64 · trixie

      Fixed · Fixed: 0.13-4

      dsa · libcrypt-openssl-dsa-perl · debian · 13

    • 0.20-3+b3 · arm64 · trixie

      Fixed · Fixed: 0.13-4

      dsa · libcrypt-openssl-dsa-perl · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]