Lucene search

[email protected]CVE-2012-1558

HistoryMar 12, 2012 - 7:55 p.m.

CVE-2012-1558

2012-03-1219:55:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2012-1558

yassl

cyassl

denial of service

null pointer dereference

application crash

x.509 certificate

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

82.4%

JSON

yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted X.509 certificate.

CPENameOperatorVersion
yassl:cyasslyassl cyassleq2.0.2
yassl:cyasslyassl cyassleq1.1.0
yassl:cyasslyassl cyassleq1.6.0
yassl:cyasslyassl cyassleq1.0.0
yassl:cyasslyassl cyassleq1.5.6
yassl:cyasslyassl cyassleq1.2.0
yassl:cyasslyassl cyassleq0.5.5
yassl:cyasslyassl cyassleq0.4.0
yassl:cyasslyassl cyassleq0.5.0
yassl:cyasslyassl cyassleq0.8.0

CPE	Name	Operator	Version
yassl:cyassl	yassl cyassl	eq	2.0.2
yassl:cyassl	yassl cyassl	eq	1.1.0
yassl:cyassl	yassl cyassl	eq	1.6.0
yassl:cyassl	yassl cyassl	eq	1.0.0
yassl:cyassl	yassl cyassl	eq	1.5.6
yassl:cyassl	yassl cyassl	eq	1.2.0
yassl:cyassl	yassl cyassl	eq	0.5.5
yassl:cyassl	yassl cyassl	eq	0.4.0
yassl:cyassl	yassl cyassl	eq	0.5.0
yassl:cyassl	yassl cyassl	eq	0.8.0

Rows per page:

1-10 of 311

References

secunia.com/advisories/48634

www.securityfocus.com/bid/52828

www.yassl.com/yaSSL/Docs-cyassl-changelog.html

exchange.xforce.ibmcloud.com/vulnerabilities/74095

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

82.4%

JSON

Related for CVE-2012-1558

prion1 ibm1