Lucene search
OpenSSLOPENSSL:CVE-2012-2110HistoryApr 19, 2012 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2012-2110
2012-04-1900:00:00
www.openssl.org
19
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9.5
Confidence
High
EPSS
0.1
Percentile
94.9%
Multiple numeric conversion errors, leading to a buffer overflow, were found in the way OpenSSL parsed ASN.1 (Abstract Syntax Notation One) data from BIO (OpenSSL's I/O abstraction) inputs. Specially-crafted DER (Distinguished Encoding Rules) encoded data read from a file or other BIO input could cause an application using the OpenSSL library to crash or, potentially, execute arbitrary code.
Related
debiancve
debiancve
CVE-2012-2110
2012-04-19 17:55:01
CVE-2012-2131
2012-04-24 20:55:02
nessus
nessus
Amazon Linux AMI : openssl (ALAS-2012-72)
2013-09-04 00:00:00
RHEL 4 : openssl096b (Unpatched Vulnerability)
2024-06-03 00:00:00
openvas
openvas
Fedora Update for openssl FEDORA-2012-6343
2012-08-30 00:00:00
RedHat Update for openssl RHSA-2012:0518-01
2012-04-26 00:00:00
Fedora Update for openssl FEDORA-2012-6343
2012-08-30 00:00:00
ubuntucve
ubuntucve
CVE-2012-2110
2012-04-19 00:00:00
CVE-2012-2131
2012-04-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.0i-alt1
2012-04-19 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.0i-alt1
2012-04-19 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0i-alt1
2012-04-19 00:00:00
nvd
nvd
CVE-2012-2110
2012-04-19 17:55:01
CVE-2012-2131
2012-04-24 20:55:02
freebsd
freebsd
OpenSSL -- integer conversions result in memory corruption
2012-04-19 00:00:00
FreeBSD -- OpenSSL multiple vulnerabilities
2012-05-03 00:00:00
oraclelinux
oraclelinux
openssl security update
2012-04-25 00:00:00
openssl security update
2012-05-08 00:00:00
openssl097a and openssl098e security update
2014-06-05 00:00:00
cvelist
cvelist
CVE-2012-2110
2012-04-19 17:00:00
CVE-2012-2131
2012-04-24 20:00:00
threatpost
threatpost
E-Mail, Source Code From VMWare Bubbles Up From Compromised Chinese Firm
2012-04-24 21:33:10
OpenSSL Releases New Fix for CVE-2012-2110 ASN1 Bug
2012-04-24 19:17:06
New Java Malware Exploits Both Windows And Mac Users
2012-04-24 17:37:49
centos
centos
openssl, openssl097a, openssl098e security update
2012-04-25 01:22:21
amazon
amazon
Important: openssl
2012-05-02 12:28:00
Important: openssl098e
2012-05-02 12:31:00
fedora
fedora
[SECURITY] Fedora 17 Update: openssl-1.0.0i-1.fc17
2012-04-26 20:07:43
[SECURITY] Fedora 16 Update: openssl-1.0.0i-1.fc16
2012-04-27 20:50:05
[SECURITY] Fedora 16 Update: openssl-1.0.0j-1.fc16
2012-06-03 00:00:32
veracode
veracode
Denial Of Service (DoS) Through Memory Consumption And Buffer Overflow
2017-02-09 00:33:40
Denial Of Service (DoS) Through Memory Consumption And Buffer Overflow
2019-01-15 08:50:55
exploitpack
exploitpack
OpenSSL - ASN1 BIO Memory Corruption
2012-04-19 00:00:00
seebug
seebug
OpenSSL "asn1_d2i_read_bio()" DER格式数据处理漏洞
2012-04-22 00:00:00
OpenSSL ASN1 BIO Memory Corruption Vulnerability
2014-07-01 00:00:00
cve
cve
CVE-2012-2110
2012-04-19 17:55:01
CVE-2012-2131
2012-04-24 20:55:02
f5
f5
K16285 : OpenSSL vulnerability CVE-2012-2110
2015-07-24 00:00:00
SOL16285 - OpenSSL vulnerability CVE-2012-2110
2015-04-09 00:00:00
redhat
redhat
(RHSA-2012:0522) Important: openssl security update
2012-04-25 00:00:00
(RHSA-2012:0518) Important: openssl security update
2012-04-24 00:00:00
(RHSA-2012:1307) Important: openssl security update
2012-09-24 15:53:22
prion
prion
Buffer overflow
2012-04-19 17:55:00
Integer overflow
2012-04-24 20:55:00
vmware
vmware
securityvulns
securityvulns
[ MDVSA-2012:064 ] openssl0.9.8
2012-04-24 00:00:00
OpenSSL memory corruption
2012-04-24 00:00:00
ESA-2012-029: RSA BSAFE® SSL-C Multiple Vulnerabilities
2014-04-07 00:00:00
suse
suse
Security update for compat-openssl097g (important)
2012-09-18 15:08:35
Security update for openssl (important)
2012-05-23 01:08:20
Security update for compat-openssl097g (important)
2012-09-12 07:08:33
debian
debian
[SECURITY] [DSA 2454-2] openssl incomplete fix
2012-04-25 02:03:10
[SECURITY] [DSA 2454-1] openssl security update
2012-04-19 21:21:20
openssl
openssl
Vulnerability in OpenSSL CVE-2012-2131
2012-04-24 00:00:00
checkpoint_security
checkpoint_security
ubuntu
ubuntu
OpenSSL vulnerability
2012-04-24 00:00:00
OpenSSL vulnerabilities
2012-04-19 00:00:00
exploitdb
exploitdb
OpenSSL - ASN1 BIO Memory Corruption
2012-04-19 00:00:00
osv
osv
openssl - multiple
2012-04-24 00:00:00
openssl - incomplete fix
2012-04-24 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:01.openssl
2012-05-30 00:00:00
aix
aix
Multiple OpenSSL vulnerabilities
2012-08-01 09:25:58
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2013-12-03 00:00:00
ibm
ibm
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9.5
Confidence
High
EPSS
0.1
Percentile
94.9%
Related for OPENSSL:CVE-2012-2110