Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-0884HistoryMar 13, 2012 - 3:12 a.m.
CVE-2012-0884
2012-03-1303:12:26
Debian Security Bug Tracker
security-tracker.debian.org
22
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.009
Percentile
82.5%
The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.0h-1 | openssl_1.0.0h-1_all.deb |
| Debian | 11 | all | openssl | < 1.0.0h-1 | openssl_1.0.0h-1_all.deb |
| Debian | 999 | all | openssl | < 1.0.0h-1 | openssl_1.0.0h-1_all.deb |
| Debian | 13 | all | openssl | < 1.0.0h-1 | openssl_1.0.0h-1_all.deb |
Related
cvelist
cvelist
CVE-2012-0884
2012-03-13 01:00:00
nvd
nvd
CVE-2012-0884
2012-03-13 03:12:26
f5
f5
SOL13598 - OpenSSL vulnerability CVE-2012-0884
2012-05-22 00:00:00
K13598 : OpenSSL vulnerability CVE-2012-0884
2013-09-20 00:00:00
checkpoint_security
checkpoint_security
Check Point response to OpenSSL CVE-2012-0884
2012-06-07 21:00:00
nessus
nessus
OpenSSL 1.0.0 < 1.0.0h Vulnerability
2012-04-02 00:00:00
openSUSE Security Update : openssl (openSUSE-SU-2012:0547-1)
2014-06-13 00:00:00
openvas
openvas
FreeBSD Ports: openssl
2012-04-30 00:00:00
FreeBSD Ports: openssl
2012-04-30 00:00:00
OpenSSL: CMS and S/MIME Bleichenbacher Attack (20120312) - Windows
2021-08-16 00:00:00
freebsd
freebsd
OpenSSL -- CMS and S/MIME Bleichenbacher attack
2012-03-12 00:00:00
FreeBSD -- OpenSSL multiple vulnerabilities
2012-05-03 00:00:00
cve
cve
CVE-2012-0884
2012-03-13 03:12:26
ubuntucve
ubuntucve
CVE-2012-0884
2012-03-12 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2012-0884
2012-03-12 00:00:00
prion
prion
Information disclosure
2012-03-13 03:12:00
veracode
veracode
Million Message Attack (MMA)
2017-02-09 01:46:40
oraclelinux
oraclelinux
openssl security and bug fix update
2012-03-27 00:00:00
openssl security and bug fix update
2012-05-29 00:00:00
openssl-fips security update
2015-04-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 1.0.0h-alt1
2012-03-23 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.0h-alt1
2012-03-23 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 1.0.0h-alt1
2012-03-23 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: openssl-1.0.0h-1.fc17
2012-04-12 02:50:17
[SECURITY] Fedora 16 Update: openssl-1.0.0h-1.fc16
2012-04-11 17:06:45
[SECURITY] Fedora 16 Update: openssl-1.0.0h-1.fc16
2012-04-11 03:52:34
amazon
amazon
Medium: openssl
2012-04-05 12:49:00
centos
centos
openssl security update
2012-05-29 22:40:25
openssl security update
2012-03-28 00:47:32
ubuntu
ubuntu
OpenSSL vulnerabilities
2012-05-24 00:00:00
securityvulns
securityvulns
OpenSSL security vulnerabilities
2012-04-02 00:00:00
[ MDVSA-2012:038 ] openssl
2012-04-02 00:00:00
[SECURITY] [DSA 2454-1] openssl security update
2012-04-22 00:00:00
redhat
redhat
(RHSA-2012:0699) Moderate: openssl security and bug fix update
2012-05-29 00:00:00
(RHSA-2012:0426) Moderate: openssl security and bug fix update
2012-03-27 00:00:00
(RHSA-2012:1307) Important: openssl security update
2012-09-24 15:53:22
debian
debian
[SECURITY] [DSA 2454-1] openssl security update
2012-04-19 21:21:20
osv
osv
openssl - multiple
2012-04-24 00:00:00
openssl - incomplete fix
2012-04-24 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:01.openssl
2012-05-30 00:00:00
aix
aix
Multiple OpenSSL vulnerabilities
2012-08-01 09:25:58
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2013-12-03 00:00:00
cert
cert
ibm
ibm
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.009
Percentile
82.5%
Related for DEBIANCVE:CVE-2012-0884