CVE-2012-1165

🗓️ 15 Mar 2012 17:00:00Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 36 Views

The mime_param_cmp function in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service via a crafted S/MIME messag

Reporter	Title	Published	Views	Family All 148
IBM Security Bulletins	Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities	26 Sep 202204:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Smart Analytics System 7600, 7700, and 7710 are affected by vulnerabilities in OpenSSL	25 Sep 202220:45	–	ibm
IBM Security Bulletins	Security Bulletin: Storwize V7000 Unified V1.4.1.0 Includes Fixes for Multiple Vendor Security Vulnerabilities	26 Sep 202204:23	–	ibm
Tenable Nessus	OpenSSL 0.9.8 < 0.9.8u / 1.0.0 < 1.0.0h Multiple Vulnerabilities	29 Mar 201200:00	–	nessus
Tenable Nessus	OpenSSL 0.9.8 < 0.9.8u / 1.0.0 < 1.0.0h Multiple Vulnerabilities	29 Mar 201200:00	–	nessus
Tenable Nessus	AIX OpenSSL Advisory : openssl_advisory4.asc	16 Apr 201400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : openssl (ALAS-2012-62)	4 Sep 201300:00	–	nessus
Tenable Nessus	CentOS 5 / 6 : openssl (CESA-2012:0426)	28 Mar 201200:00	–	nessus
Tenable Nessus	Debian DSA-2454-2 : openssl - multiple vulnerabilities	20 Apr 201200:00	–	nessus
Tenable Nessus	Fedora 18 : mingw-openssl-1.0.1c-1.fc18 (2012-18035)	26 Nov 201200:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	all	openssl	1.0.0h-1	openssl_1.0.0h-1_all.deb
Debian	12	all	openssl	1.0.0h-1	openssl_1.0.0h-1_all.deb
Debian	13	all	openssl	1.0.0h-1	openssl_1.0.0h-1_all.deb
Debian	14	all	openssl	1.0.0h-1	openssl_1.0.0h-1_all.deb
Debian	999	all	openssl	1.0.0h-1	openssl_1.0.0h-1_all.deb

15 Mar 2012 17:00Current

7.5High risk

Vulners AI Score7.5

CVSS 25

EPSS0.06767