CVE-2012-2686

🗓️ 08 Feb 2013 00:00:00Reported by ubuntu.comType

OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service via crafted CBC data, affecting AES-NI functionality in TLS 1.1 and 1.2 implementations

Reporter	Title	Published	Views	Family All 76
FreeBSD	OpenSSL -- TLS 1.1, 1.2 denial of service	5 Feb 201300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Tivoli Management Framework affected by vulnerabilities in OpenSSL 1.0.1c	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Express for UNIX is affected by multiple vulnerabilities in OpenSSL	24 Jul 202022:49	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Storage Productivity Center affected by vulnerabilities in OpenSSL (CVE-2013-0169, CVE-2012-2686, CVE-2013-0166)	19 Aug 202218:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in ClearCase OpenSSL Component (CVE-2013-0169, CVE-2012-2686, CVE-2013-0166)	17 Jun 201804:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities exist in the OpenSSL component of IBM Initiate Master Data Service and IBM InfoSphere Master Data Management Standard Edition (CVE-2013-0166, CVE-2013-0166, CVE-2012-2686)	26 Sep 202203:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by multiple OpenSSL vulnerabilities	26 Sep 202205:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are affected by multiple vulnerabilities in OpenSSL	25 Sep 202223:13	–	ibm
Tenable Nessus	OpenSSL < 0.9.8y / 1.0.1d / 1.0.0k Multiple Vulnerabilities	11 Jun 201300:00	–	nessus
Tenable Nessus	Mac OS X 10.8 < 10.8.5 Multiple Vulnerabilities (Security Update 2013-004)	16 Sep 201300:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	12.04	any	openssl	1.0.1-4ubuntu5.8	openssl_1.0.1-4ubuntu5.8_any.deb
Ubuntu	12.10	any	openssl	1.0.1c-3ubuntu2.3	openssl_1.0.1c-3ubuntu2.3_any.deb

Source	Link
openssl	www.openssl.org/news/secadv_20130204.txt
ubuntu	www.ubuntu.com/security/notices/USN-1732-1
ubuntu	www.ubuntu.com/security/notices/USN-1732-3
cve	www.cve.org/CVERecord

24 Jul 2024 15:57Current

7.2High risk

Vulners AI Score7.2

CVSS 25

EPSS0.63145