Lucene search

K
freebsdFreeBSD1959E847-D4F0-11E3-84B0-0018FE623F2B
HistoryMay 02, 2014 - 12:00 a.m.

OpenSSL -- NULL pointer dereference / DoS

2014-05-0200:00:00
vuxml.freebsd.org
30

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.044 Low

EPSS

Percentile

92.3%

OpenBSD and David Ramos reports:

Applications that use SSL_MODE_RELEASE_BUFFERS, such as nginx/apache,
are prone to a race condition which may allow a remote attacker to
crash the current service.

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.044 Low

EPSS

Percentile

92.3%