Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-2131HistoryApr 24, 2012 - 8:55 p.m.
CVE-2012-2131
2012-04-2420:55:00
Debian Security Bug Tracker
security-tracker.debian.org
16
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.097 Low
EPSS
Percentile
94.7%
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 3.0.11-1~deb12u2 | openssl_3.0.11-1~deb12u2_all.deb |
| Debian | 11 | all | openssl | < 1.1.1w-0+deb11u1 | openssl_1.1.1w-0+deb11u1_all.deb |
| Debian | 10 | all | openssl | < 1.1.1n-0+deb10u3 | openssl_1.1.1n-0+deb10u3_all.deb |
| Debian | 999 | all | openssl | < 3.2.1-3 | openssl_3.2.1-3_all.deb |
| Debian | 13 | all | openssl | < 3.1.5-1 | openssl_3.1.5-1_all.deb |
Related
suse
suse
Security update for compat-openssl097g (important)
2012-09-18 15:08:35
Security update for openssl (important)
2012-05-23 01:08:20
Security update for compat-openssl097g (important)
2012-09-12 07:08:33
securityvulns
securityvulns
[ MDVSA-2012:064 ] openssl0.9.8
2012-04-24 00:00:00
OpenSSL memory corruption
2012-04-24 00:00:00
RSA BSAFE security vulnerabilities
2012-10-29 00:00:00
openvas
openvas
Ubuntu Update for openssl USN-1428-1
2012-04-26 00:00:00
Debian Security Advisory DSA 2454-2 (openssl)
2012-04-30 00:00:00
Mandriva Update for openssl0.9.8 MDVSA-2012:064 (openssl0.9.8)
2012-08-03 00:00:00
nessus
nessus
SuSE 10 Security Update : compat-openssl097g (ZYPP Patch Number 8262)
2012-09-12 00:00:00
SuSE 10 Security Update : openssl (ZYPP Patch Number 8112)
2012-05-23 00:00:00
prion
prion
Integer overflow
2012-04-24 20:55:00
Buffer overflow
2012-04-19 17:55:00
openssl
openssl
Vulnerability in OpenSSL CVE-2012-2131
2012-04-24 00:00:00
Vulnerability in OpenSSL CVE-2012-2110
2012-04-19 00:00:00
debian
debian
[SECURITY] [DSA 2454-2] openssl incomplete fix
2012-04-25 02:03:10
[SECURITY] [DSA 2454-1] openssl security update
2012-04-19 21:21:20
ubuntu
ubuntu
OpenSSL vulnerability
2012-04-24 00:00:00
OpenSSL vulnerabilities
2012-04-19 00:00:00
checkpoint_security
checkpoint_security
cve
cve
CVE-2012-2131
2012-04-24 20:55:00
CVE-2012-2110
2012-04-19 17:55:00
ubuntucve
ubuntucve
CVE-2012-2131
2012-04-24 00:00:00
CVE-2012-2110
2012-04-19 00:00:00
f5
f5
SOL17454 - OpenSSL vulnerabilities CVE-2005-2946, CVE-2008-0891, and CVE-2012-2131
2015-10-16 00:00:00
SOL16285 - OpenSSL vulnerability CVE-2012-2110
2015-04-09 00:00:00
osv
osv
openssl - multiple
2012-04-24 00:00:00
openssl - incomplete fix
2012-04-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.0i-alt1
2012-04-19 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0i-alt1
2012-04-19 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.0i-alt1
2012-04-19 00:00:00
debiancve
debiancve
CVE-2012-2110
2012-04-19 17:55:00
threatpost
threatpost
E-Mail, Source Code From VMWare Bubbles Up From Compromised Chinese Firm
2012-04-24 21:33:10
OpenSSL Releases New Fix for CVE-2012-2110 ASN1 Bug
2012-04-24 19:17:06
New Java Malware Exploits Both Windows And Mac Users
2012-04-24 17:37:49
oraclelinux
oraclelinux
openssl security update
2012-05-08 00:00:00
openssl security update
2012-04-25 00:00:00
openssl097a and openssl098e security update
2014-06-05 00:00:00
amazon
amazon
Important: openssl
2012-05-02 12:28:00
Important: openssl098e
2012-05-02 12:31:00
freebsd
freebsd
OpenSSL -- integer conversions result in memory corruption
2012-04-19 00:00:00
FreeBSD -- OpenSSL multiple vulnerabilities
2012-05-03 00:00:00
centos
centos
openssl, openssl097a, openssl098e security update
2012-04-25 01:22:21
redhat
redhat
(RHSA-2012:0522) Important: openssl security update
2012-04-25 00:00:00
(RHSA-2012:0518) Important: openssl security update
2012-04-24 00:00:00
(RHSA-2012:1308) Important: openssl security update
2012-09-24 15:54:31
seebug
seebug
OpenSSL "asn1_d2i_read_bio()" DER格式数据处理漏洞
2012-04-22 00:00:00
OpenSSL ASN1 BIO Memory Corruption Vulnerability
2014-07-01 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: openssl-1.0.0i-1.fc17
2012-04-26 20:07:43
[SECURITY] Fedora 16 Update: openssl-1.0.0i-1.fc16
2012-04-27 20:50:05
[SECURITY] Fedora 15 Update: openssl-1.0.0i-1.fc15
2012-05-10 14:16:11
veracode
veracode
Denial Of Service (DoS) Through Memory Consumption And Buffer Overflow
2017-02-09 00:33:40
Denial Of Service (DoS) Through Memory Consumption And Buffer Overflow
2019-01-15 08:50:55
exploitpack
exploitpack
OpenSSL - ASN1 BIO Memory Corruption
2012-04-19 00:00:00
aix
aix
Multiple OpenSSL vulnerabilities
2012-08-01 09:25:58
vmware
vmware
exploitdb
exploitdb
OpenSSL - ASN1 BIO Memory Corruption
2012-04-19 00:00:00
ibm
ibm
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:01.openssl
2012-05-30 00:00:00
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2013-12-03 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.097 Low
EPSS
Percentile
94.7%
Related for DEBIANCVE:CVE-2012-2131