Lucene search
UbuntuUSN-1424-1HistoryApr 19, 2012 - 12:00 a.m.
OpenSSL vulnerabilities
2012-04-1900:00:00
ubuntu.com
28
9.4 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.143 Low
EPSS
Percentile
95.6%
Releases
- Ubuntu 11.10
- Ubuntu 11.04
- Ubuntu 10.04
- Ubuntu 8.04
Packages
- openssl - Secure Socket Layer (SSL) cryptographic library and tools
Details
It was discovered that OpenSSL could be made to dereference a NULL pointer
when processing S/MIME messages. A remote attacker could use this to cause
a denial of service. These issues did not affect Ubuntu 8.04 LTS.
(CVE-2006-7250, CVE-2012-1165)
Tavis Ormandy discovered that OpenSSL did not properly perform bounds
checking when processing DER data via BIO or FILE functions. A remote
attacker could trigger this flaw in services that used SSL to cause a
denial of service or possibly execute arbitrary code with application
privileges. (CVE-2012-2110)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 8.04 | noarch | libssl0.9.8 | < 0.9.8g-4ubuntu3.17 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libcrypto0.9.8-udeb | < 0.9.8g-4ubuntu3.17 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libssl-dev | < 0.9.8g-4ubuntu3.17 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libssl0.9.8-dbg | < 0.9.8g-4ubuntu3.17 | UNKNOWN |
| Ubuntu | 8.04 | noarch | openssl | < 0.9.8g-4ubuntu3.17 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libssl1.0.0 | < 1.0.0e-2ubuntu4.4 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libcrypto1.0.0-udeb | < 1.0.0e-2ubuntu4.4 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libssl-dev | < 1.0.0e-2ubuntu4.4 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libssl1.0.0-dbg | < 1.0.0e-2ubuntu4.4 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libssl1.0.0-udeb | < 1.0.0e-2ubuntu4.4 | UNKNOWN |
Related
nessus
nessus
Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 : openssl vulnerabilities (USN-1424-1)
2012-04-20 00:00:00
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 8034)
2012-04-11 00:00:00
SuSE 11.1 Security Update : OpenSSL (SAT Patch Number 6054)
2012-04-11 00:00:00
openvas
openvas
Ubuntu Update for openssl USN-1424-1
2012-04-20 00:00:00
Ubuntu Update for openssl USN-1424-1
2012-04-20 00:00:00
Mandriva Update for openssl MDVSA-2012:038 (openssl)
2012-08-03 00:00:00
prion
prion
Null pointer dereference
2012-03-15 17:55:00
Buffer overflow
2012-04-19 17:55:00
Integer overflow
2012-04-24 20:55:00
debiancve
debiancve
ubuntucve
ubuntucve
f5
f5
SOL13597 - OpenSSL vulnerability CVE-2012-1165
2012-05-21 00:00:00
K13597 : OpenSSL vulnerability CVE-2012-1165
2013-09-12 00:00:00
cve
cve
securityvulns
securityvulns
[ MDVSA-2012:038 ] openssl
2012-04-02 00:00:00
[SECURITY] [DSA 2454-1] openssl security update
2012-04-22 00:00:00
OpenSSL security vulnerabilities
2012-04-02 00:00:00
aix
aix
Multiple OpenSSL vulnerabilities
2012-08-01 09:25:58
fedora
fedora
[SECURITY] Fedora 16 Update: openssl-1.0.0i-1.fc16
2012-04-27 20:50:05
[SECURITY] Fedora 16 Update: openssl-1.0.0j-1.fc16
2012-06-03 00:00:32
[SECURITY] Fedora 15 Update: openssl-1.0.0i-1.fc15
2012-05-10 14:16:11
debian
debian
[SECURITY] [DSA 2454-1] openssl security update
2012-04-19 21:21:20
[SECURITY] [DSA 2454-2] openssl incomplete fix
2012-04-25 02:03:10
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:41:58
Denial Of Service (DoS) Through Null Pointer Dereference
2017-02-09 00:48:58
Denial Of Service (DoS) Through Memory Consumption And Buffer Overflow
2017-02-09 00:33:40
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2013-12-03 00:00:00
osv
osv
openssl - multiple
2012-04-24 00:00:00
openssl - incomplete fix
2012-04-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.0i-alt1
2012-04-19 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0i-alt1
2012-04-19 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.0i-alt1
2012-04-19 00:00:00
threatpost
threatpost
E-Mail, Source Code From VMWare Bubbles Up From Compromised Chinese Firm
2012-04-24 21:33:10
OpenSSL Releases New Fix for CVE-2012-2110 ASN1 Bug
2012-04-24 19:17:06
New Java Malware Exploits Both Windows And Mac Users
2012-04-24 17:37:49
oraclelinux
oraclelinux
openssl security update
2012-05-08 00:00:00
openssl security update
2012-04-25 00:00:00
openssl security and bug fix update
2012-03-27 00:00:00
amazon
amazon
Important: openssl
2012-05-02 12:28:00
Important: openssl098e
2012-05-02 12:31:00
Medium: openssl
2012-04-05 12:49:00
freebsd
freebsd
OpenSSL -- integer conversions result in memory corruption
2012-04-19 00:00:00
centos
centos
openssl, openssl097a, openssl098e security update
2012-04-25 01:22:21
openssl security update
2012-03-28 00:47:32
openssl
openssl
Vulnerability in OpenSSL CVE-2012-2110
2012-04-19 00:00:00
Vulnerability in OpenSSL CVE-2012-2131
2012-04-24 00:00:00
seebug
seebug
OpenSSL "asn1_d2i_read_bio()" DER格式数据处理漏洞
2012-04-22 00:00:00
OpenSSL ASN1 BIO Memory Corruption Vulnerability
2014-07-01 00:00:00
exploitpack
exploitpack
OpenSSL - ASN1 BIO Memory Corruption
2012-04-19 00:00:00
suse
suse
Security update for openssl (important)
2012-05-30 23:08:17
Security update for compat-openssl097g (important)
2012-09-18 15:08:35
Security update for openssl (important)
2012-05-23 01:08:20
redhat
redhat
(RHSA-2012:0522) Important: openssl security update
2012-04-25 00:00:00
(RHSA-2012:0518) Important: openssl security update
2012-04-24 00:00:00
(RHSA-2012:1308) Important: openssl security update
2012-09-24 15:54:31
vmware
vmware
ubuntu
ubuntu
OpenSSL vulnerability
2012-04-24 00:00:00
checkpoint_security
checkpoint_security
exploitdb
exploitdb
OpenSSL - ASN1 BIO Memory Corruption
2012-04-19 00:00:00
9.4 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.143 Low
EPSS
Percentile
95.6%
Related for USN-1424-1