Lucene search

K
cveRedhatCVE-2013-2125
HistoryMay 27, 2014 - 3:00 p.m.

CVE-2013-2125

2014-05-2715:00:00
CWE-310
redhat
web.nvd.nist.gov
29
opensmtpd
ssl
vulnerability
denial of service
cve-2013-2125
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.009

Percentile

82.7%

OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service (connection blocking) by keeping a connection open.

Affected configurations

Nvd
Node
openbsdopensmtpdRange5.3.1
VendorProductVersionCPE
openbsdopensmtpd*cpe:2.3:a:openbsd:opensmtpd:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.009

Percentile

82.7%

Related for CVE-2013-2125