Lucene search
Ubuntu.comUB:CVE-2012-2131HistoryApr 24, 2012 - 12:00 a.m.
CVE-2012-2131
2012-04-2400:00:00
ubuntu.com
ubuntu.com
11
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.097 Low
EPSS
Percentile
94.7%
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL
0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause
a denial of service (memory corruption) or possibly have unspecified other
impact, via crafted DER data, as demonstrated by an X.509 certificate or an
RSA public key. NOTE: this vulnerability exists because of an incomplete
fix for CVE-2012-2110.
Notes
| Author | Note |
|---|---|
| mdeslaur | 1.0.x not affected by CVE-2012-2131 all releases also have second patch to fix incorrect error code introduced in the fix for CVE-2012-2110 |
Related
suse
suse
Security update for compat-openssl097g (important)
2012-09-18 15:08:35
Security update for openssl (important)
2012-05-23 01:08:20
Security update for compat-openssl097g (important)
2012-09-12 07:08:33
securityvulns
securityvulns
[ MDVSA-2012:064 ] openssl0.9.8
2012-04-24 00:00:00
OpenSSL memory corruption
2012-04-24 00:00:00
RSA BSAFE security vulnerabilities
2012-10-29 00:00:00
openvas
openvas
OpenSSL: ASN1 BIO Incomplete Fix (20120424) - Linux
2021-08-16 00:00:00
Mandriva Update for openssl0.9.8 MDVSA-2012:064 (openssl0.9.8)
2012-08-03 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0623-1)
2021-06-09 00:00:00
nessus
nessus
SuSE 11.1 Security Update : openssl (SAT Patch Number 6245)
2013-01-25 00:00:00
SuSE 11.2 Security Update : compat-openssl097g (SAT Patch Number 6749)
2013-01-25 00:00:00
Mandriva Linux Security Advisory : openssl0.9.8 (MDVSA-2012:064)
2012-04-25 00:00:00
debiancve
debiancve
CVE-2012-2131
2012-04-24 20:55:00
CVE-2012-2110
2012-04-19 17:55:00
ubuntu
ubuntu
OpenSSL vulnerability
2012-04-24 00:00:00
OpenSSL vulnerabilities
2012-04-19 00:00:00
checkpoint_security
checkpoint_security
cve
cve
CVE-2012-2131
2012-04-24 20:55:00
CVE-2012-2110
2012-04-19 17:55:00
debian
debian
[SECURITY] [DSA 2454-2] openssl incomplete fix
2012-04-25 02:03:10
[SECURITY] [DSA 2454-1] openssl security update
2012-04-19 21:21:20
openssl
openssl
Vulnerability in OpenSSL CVE-2012-2131
2012-04-24 00:00:00
Vulnerability in OpenSSL CVE-2012-2110
2012-04-19 00:00:00
prion
prion
Integer overflow
2012-04-24 20:55:00
Buffer overflow
2012-04-19 17:55:00
f5
f5
SOL17454 - OpenSSL vulnerabilities CVE-2005-2946, CVE-2008-0891, and CVE-2012-2131
2015-10-16 00:00:00
SOL16285 - OpenSSL vulnerability CVE-2012-2110
2015-04-09 00:00:00
osv
osv
openssl - multiple
2012-04-24 00:00:00
openssl - incomplete fix
2012-04-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.0i-alt1
2012-04-19 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 1.0.0i-alt1
2012-04-19 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.0i-alt1
2012-04-19 00:00:00
ubuntucve
ubuntucve
CVE-2012-2110
2012-04-19 00:00:00
threatpost
threatpost
E-Mail, Source Code From VMWare Bubbles Up From Compromised Chinese Firm
2012-04-24 21:33:10
OpenSSL Releases New Fix for CVE-2012-2110 ASN1 Bug
2012-04-24 19:17:06
New Java Malware Exploits Both Windows And Mac Users
2012-04-24 17:37:49
oraclelinux
oraclelinux
openssl security update
2012-05-08 00:00:00
openssl security update
2012-04-25 00:00:00
openssl097a and openssl098e security update
2014-06-05 00:00:00
freebsd
freebsd
OpenSSL -- integer conversions result in memory corruption
2012-04-19 00:00:00
FreeBSD -- OpenSSL multiple vulnerabilities
2012-05-03 00:00:00
amazon
amazon
Important: openssl
2012-05-02 12:28:00
Important: openssl098e
2012-05-02 12:31:00
centos
centos
openssl, openssl097a, openssl098e security update
2012-04-25 01:22:21
seebug
seebug
OpenSSL ASN1 BIO Memory Corruption Vulnerability
2014-07-01 00:00:00
OpenSSL "asn1_d2i_read_bio()" DER格式数据处理漏洞
2012-04-22 00:00:00
redhat
redhat
(RHSA-2012:0518) Important: openssl security update
2012-04-24 00:00:00
(RHSA-2012:0522) Important: openssl security update
2012-04-25 00:00:00
(RHSA-2012:1308) Important: openssl security update
2012-09-24 15:54:31
fedora
fedora
[SECURITY] Fedora 17 Update: openssl-1.0.0i-1.fc17
2012-04-26 20:07:43
[SECURITY] Fedora 16 Update: openssl-1.0.0i-1.fc16
2012-04-27 20:50:05
[SECURITY] Fedora 16 Update: openssl-1.0.0j-1.fc16
2012-06-03 00:00:32
veracode
veracode
Denial Of Service (DoS) Through Memory Consumption And Buffer Overflow
2017-02-09 00:33:40
Denial Of Service (DoS) Through Memory Consumption And Buffer Overflow
2019-01-15 08:50:55
exploitpack
exploitpack
OpenSSL - ASN1 BIO Memory Corruption
2012-04-19 00:00:00
aix
aix
Multiple OpenSSL vulnerabilities
2012-08-01 09:25:58
vmware
vmware
exploitdb
exploitdb
OpenSSL - ASN1 BIO Memory Corruption
2012-04-19 00:00:00
ibm
ibm
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:01.openssl
2012-05-30 00:00:00
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2013-12-03 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.097 Low
EPSS
Percentile
94.7%
Related for UB:CVE-2012-2131