OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.

OSVersionArchitecturePackageVersionFilename
Debian12allopenssl< 1.0.0g-1openssl_1.0.0g-1_all.deb
Debian11allopenssl< 1.0.0g-1openssl_1.0.0g-1_all.deb
Debian10allopenssl< 1.0.0g-1openssl_1.0.0g-1_all.deb
Debian999allopenssl< 1.0.0g-1openssl_1.0.0g-1_all.deb
Debian13allopenssl< 1.0.0g-1openssl_1.0.0g-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	openssl	< 1.0.0g-1	openssl_1.0.0g-1_all.deb
Debian	11	all	openssl	< 1.0.0g-1	openssl_1.0.0g-1_all.deb
Debian	10	all	openssl	< 1.0.0g-1	openssl_1.0.0g-1_all.deb
Debian	999	all	openssl	< 1.0.0g-1	openssl_1.0.0g-1_all.deb
Debian	13	all	openssl	< 1.0.0g-1	openssl_1.0.0g-1_all.deb

openvas 64

f5 4

prion 3

nessus 55

fedora 12

freebsd 2

openssl 2

ubuntucve 3

cve 3

oraclelinux 5

veracode 1

aix 1

debiancve 2

paloalto 1

debian 2

gentoo 1

securityvulns 4

altlinux 5

redhat 7

suse 4

ubuntu 1

centos 2

amazon 1

ibm 8

osv 1

rosalinux 1

cert 1

vmware 2

lenovo 1

openvas

FreeBSD Ports: openssl

2012-02-12 00:00:00

FreeBSD Ports: openssl

2012-02-12 00:00:00

OpenSSL: DTLS DoS Attack (20120118) - Windows

2021-08-16 00:00:00

SOL15417 - OpenSSL vulnerability CVE-2012-0050

2014-07-17 00:00:00

K15417 : OpenSSL vulnerability CVE-2012-0050

2014-08-14 00:00:00

SOL15388 - OpenSSL vulnerability CVE-2011-4108

2014-07-17 00:00:00

prion

Design/Logic Flaw

2012-01-19 19:55:00

Design/Logic Flaw

2012-01-06 01:55:00

Sql injection

2012-01-06 01:55:00

nessus

FreeBSD : OpenSSL -- DTLS Denial of Service (5c5f19ce-43af-11e1-89b4-001ec9578670)

2012-01-23 00:00:00

Mandriva Linux Security Advisory : openssl (MDVSA-2012:011)

2012-01-30 00:00:00

OpenSSL 0.9.8s DTLS Denial of Service

2012-01-27 00:00:00

fedora

[SECURITY] Fedora 16 Update: openssl-1.0.0g-1.fc16

2012-01-22 05:27:15

[SECURITY] Fedora 15 Update: openssl-1.0.0g-1.fc15

2012-01-24 07:55:34

[SECURITY] Fedora 16 Update: openssl-1.0.0h-1.fc16

2012-04-11 03:52:34

freebsd

OpenSSL -- DTLS Denial of Service

2012-01-18 00:00:00

OpenSSL -- multiple vulnerabilities

2012-01-04 00:00:00

openssl

Vulnerability in OpenSSL CVE-2012-0050

2012-01-04 00:00:00

Vulnerability in OpenSSL CVE-2011-4108

2012-01-04 00:00:00

ubuntucve

CVE-2012-0050

2012-01-19 00:00:00

CVE-2011-4108

2012-01-05 00:00:00

CVE-2012-0390

2012-01-06 00:00:00

cve

CVE-2012-0050

2012-01-19 19:55:00

CVE-2011-4108

2012-01-06 01:55:00

CVE-2012-0390

2012-01-06 01:55:00

oraclelinux

openssl security update

2012-01-24 00:00:00

openssl security update

2012-01-24 00:00:00

openssl-fips security update

2015-04-02 00:00:00

veracode

Information Disclosure

2020-04-10 01:09:44

aix

Multiple OpenSSL vulnerabilities

2012-03-21 13:02:49

debiancve

CVE-2011-4108

2012-01-06 01:55:00

CVE-2012-0390

2012-01-06 01:55:00

paloalto

OpenSSL Plain Text Recovery Attack Vulnerability

2012-04-27 23:30:00

debian

[SECURITY] [DSA 2392-1] openssl security update

2012-01-23 19:31:44

[SECURITY] [DSA 2390-1] openssl security update

2012-01-15 20:23:09

gentoo

OpenSSL: Multiple vulnerabilities

2012-03-06 00:00:00

securityvulns

OpenSSL library multiple security vulnerabilities

2012-01-20 00:00:00

HP Onboard Administrator multiple security vulnerabilities

2012-06-17 00:00:00

[security bulletin] HPSBMU02776 SSRT100852 rev.1 - HP Onboard Administrator (OA), Remote Unauthorized Access to Data, Unauthorized Disclosure of Information Denial of Service (DoS)

2012-06-17 00:00:00

altlinux

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0h-alt1

2012-03-23 00:00:00

Security fix for the ALT Linux 6 package openssl10 version 1.0.0h-alt1

2012-03-23 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.0h-alt1

2012-03-23 00:00:00

redhat

(RHSA-2012:0109) Important: rhev-hypervisor6 security and bug fix update

2012-02-15 00:00:00

(RHSA-2012:0060) Moderate: openssl security update

2012-01-24 00:00:00

(RHSA-2012:0059) Moderate: openssl security update

2012-01-24 00:00:00

suse

Security update for openssl (important)

2012-05-30 23:08:17

Security update for OpenSSL (important)

2012-01-16 17:08:28

openssl: fixing various security issues (important)

2012-01-16 17:08:14

ubuntu

OpenSSL vulnerabilities

2012-02-09 00:00:00

centos

openssl security update

2012-01-24 21:54:22

openssl security update

2012-01-30 20:25:59

amazon

Medium: openssl

2012-02-02 14:24:00

ibm

Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000 and D5100 and IBM Smart Analytics System 1050, 2050, 5600 and 5710 are affected by vulnerabilities in OpenSSL

2022-09-25 23:13:40

Security Bulletin: IBM Smart Analytics System 7600, 7700, and 7710 are affected by vulnerabilities in OpenSSL

2022-09-25 20:45:36

Security Bulletin: Tivoli Management Framework affected by vulnerabilities in OpenSSL versions prior to 1.0.0

2022-09-25 23:13:40

osv

openssl - several

2012-01-15 00:00:00

rosalinux

Advisory ROSA-SA-2021-1939

2021-07-02 17:38:47

cert

Fiery Network Controllers for Xerox DocuColor 242/252/260 Printer/Copier use a vulnerable version of OpenSSL

2013-03-18 00:00:00

vmware

VMware vSphere and vCOps updates to third party libraries

2012-08-30 00:00:00

VMware vSphere and vCOps updates to third party libraries

2012-08-30 00:00:00

lenovo

Intel® PROSet/Wireless WiFi Software Vulnerabilities - US

2018-11-13 17:10:51

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

8.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.145 Low

EPSS

Percentile

95.7%

JSON

Related for DEBIANCVE:CVE-2012-0050