Lucene search

K
cveMitreCVE-2011-5268
HistoryDec 24, 2013 - 7:55 p.m.

CVE-2011-5268

2013-12-2419:55:06
CWE-310
mitre
web.nvd.nist.gov
36
cve-2011-5268
bip
denial of service
file descriptor
ssl handshake
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.009

Percentile

82.7%

connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service (file descriptor consumption and crash) via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 because it is a different type of issue.

Affected configurations

Nvd
Node
duckcorpbipRange0.8.8
OR
duckcorpbipMatch0.8.0
OR
duckcorpbipMatch0.8.0rc0
OR
duckcorpbipMatch0.8.0rc1
OR
duckcorpbipMatch0.8.1
OR
duckcorpbipMatch0.8.2
OR
duckcorpbipMatch0.8.3
OR
duckcorpbipMatch0.8.4
OR
duckcorpbipMatch0.8.5
OR
duckcorpbipMatch0.8.6
OR
duckcorpbipMatch0.8.7
Node
fedoraprojectfedoraMatch18
OR
fedoraprojectfedoraMatch19
OR
fedoraprojectfedoraMatch20
VendorProductVersionCPE
duckcorpbip*cpe:2.3:a:duckcorp:bip:*:*:*:*:*:*:*:*
duckcorpbip0.8.0cpe:2.3:a:duckcorp:bip:0.8.0:*:*:*:*:*:*:*
duckcorpbip0.8.0cpe:2.3:a:duckcorp:bip:0.8.0:rc0:*:*:*:*:*:*
duckcorpbip0.8.0cpe:2.3:a:duckcorp:bip:0.8.0:rc1:*:*:*:*:*:*
duckcorpbip0.8.1cpe:2.3:a:duckcorp:bip:0.8.1:*:*:*:*:*:*:*
duckcorpbip0.8.2cpe:2.3:a:duckcorp:bip:0.8.2:*:*:*:*:*:*:*
duckcorpbip0.8.3cpe:2.3:a:duckcorp:bip:0.8.3:*:*:*:*:*:*:*
duckcorpbip0.8.4cpe:2.3:a:duckcorp:bip:0.8.4:*:*:*:*:*:*:*
duckcorpbip0.8.5cpe:2.3:a:duckcorp:bip:0.8.5:*:*:*:*:*:*:*
duckcorpbip0.8.6cpe:2.3:a:duckcorp:bip:0.8.6:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.009

Percentile

82.7%