PT-2012-1111 · Openssl+1 · Openssl+1

Published 2012-01-04 · Updated 2024-06-15 · CVE-2012-0027

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.0g

Description The issue allows remote attackers to cause problems with the service, potentially leading to a denial of service (daemon crash) via crafted data from a TLS client. Multiple issues in the OpenSSL package can lead to breaches of confidentiality, integrity, and availability of protected information. These issues can be exploited remotely.

Recommendations For versions prior to 1.0.0g, update to version 1.0.0g or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific issue.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-09442

CVE-2012-0027

OPENSUSE-SU-2024:10271-1

OPENSUSE-SU-2024:10529-1

OPENSUSE-SU-2024:11127-1

SUSE-FU-2022:0445-1

Affected Products

Openssl

Suse

References · 152

• https://bdu.fstec.ru/vul/2015-09442 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:11127-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0027 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html · Vendor Advisory
• http://openssl.org/news/secadv_20120104.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0027 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-0027 · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2012:007 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-0027 · Vendor Advisory
• https://suse.com/security/cve/CVE-2016-2177 · Note
• https://suse.com/security/cve/CVE-2015-0204 · Note
• https://suse.com/security/cve/CVE-2014-3513 · Note
• http://security.gentoo.org/glsa/glsa-201203-12.xml · Note
• https://suse.com/security/cve/CVE-2012-2110 · Note