PT-2012-1111 · Openssl+1 · Openssl+1

Publicado 2012-01-04 · Atualizado 2024-06-15 · CVE-2012-0027

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.0g

Description The issue allows remote attackers to cause problems with the service, potentially leading to a denial of service (daemon crash) via crafted data from a TLS client. Multiple issues in the OpenSSL package can lead to breaches of confidentiality, integrity, and availability of protected information. These issues can be exploited remotely.

Recommendations For versions prior to 1.0.0g, update to version 1.0.0g or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific issue.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2015-09442

CVE-2012-0027

OPENSUSE-SU-2024:10271-1

OPENSUSE-SU-2024:10529-1

OPENSUSE-SU-2024:11127-1

SUSE-FU-2022:0445-1

Produtos afetados

Openssl

Suse

Referências · 152

• https://suse.com/security/cve/CVE-2016-2177 · Nota
• https://suse.com/security/cve/CVE-2015-0204 · Nota
• https://suse.com/security/cve/CVE-2014-3513 · Nota
• http://security.gentoo.org/glsa/glsa-201203-12.xml · Nota
• https://suse.com/security/cve/CVE-2012-2110 · Nota
• https://suse.com/security/cve/CVE-2009-1387 · Nota
• https://suse.com/security/cve/CVE-2014-3509 · Nota
• https://suse.com/security/cve/CVE-2016-0800 · Nota
• https://suse.com/security/cve/CVE-2015-0293 · Nota
• https://suse.com/security/cve/CVE-2006-4339 · Nota
• https://suse.com/security/cve/CVE-2016-0798 · Nota
• https://suse.com/security/cve/CVE-2013-4353 · Nota
• https://suse.com/security/cve/CVE-2021-3712 · Nota
• https://suse.com/security/cve/CVE-2014-3567 · Nota
• https://suse.com/security/cve/CVE-2007-3108 · Nota