Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-0166
HistoryFeb 08, 2013 - 12:00 a.m.

CVE-2013-0166

2013-02-0800:00:00
ubuntu.com
ubuntu.com
18

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.8%

OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does
not properly perform signature verification for OCSP responses, which
allows remote OCSP servers to cause a denial of service (NULL pointer
dereference and application crash) via an invalid key.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenssl<ย 0.9.8g-4ubuntu3.20UNKNOWN
ubuntu10.04noarchopenssl<ย 0.9.8k-7ubuntu8.14UNKNOWN
ubuntu11.10noarchopenssl<ย 1.0.0e-2ubuntu4.7UNKNOWN
ubuntu12.04noarchopenssl<ย 1.0.1-4ubuntu5.6UNKNOWN
ubuntu12.10noarchopenssl<ย 1.0.1c-3ubuntu2.1UNKNOWN
ubuntu13.04noarchopenssl<ย 1.0.1c-4ubuntu4UNKNOWN
ubuntu13.10noarchopenssl<ย 1.0.1c-4ubuntu4UNKNOWN
ubuntu14.04noarchopenssl<ย 1.0.1c-4ubuntu4UNKNOWN
ubuntu12.04noarchopenssl098<ย 0.9.8o-7ubuntu3.2UNKNOWN
ubuntu13.10noarchopenssl098<ย 0.9.8o-7ubuntu3.2.13.10.1UNKNOWN
Rows per page:
1-10 of 111

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

79.8%