Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2018-12384
HistoryApr 29, 2019 - 3:29 p.m.

CVE-2018-12384

2019-04-2915:29:00
Alpine Linux Development Team
security.alpinelinux.org
17

0.043 Low

EPSS

Percentile

92.3%

When handling a SSLv2-compatible ClientHello request, the server doesn’t generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3.