K14236 : OpenSSL vulnerability CVE-2012-2686

Security Advisory Description

A flaw in the OpenSSL handling of CBC ciphersuites in TLS 1.1 and TLS 1.2 on AES-NI supporting platforms can be exploited in a denial-of-service (DoS) attack. Anyone using an AES-NI platform for TLS 1.2 or TLS 1.1 on OpenSSL 1.0.1 before 1.0.1d is affected. Platforms that do not support AES-NI, or versions of OpenSSL that do not implement TLS 1.2 or 1.1 (for example, OpenSSL 0.9.8 and 1.0.0), are not affected.

Impact

None. F5 products do not use affected OpenSSL versions.