Veracode Vulnerability DatabaseVERACODE:3521Denial Of Service (DoS) Through Null Pointer Dereference
0.114 Low
EPSS
Percentile
95.3%
OpenSSL is vulnerable to denial of service (DoS) attacks. These attacks are possible because the mime_param_cmp function can cause null pointer deferences through S/MIME messages.
References
cvs.openssl.org/chngview?cn=22252
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html
lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html
lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html
lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html
marc.info/?l=bugtraq&m=133728068926468&w=2
marc.info/?l=bugtraq&m=134039053214295&w=2
rhn.redhat.com/errata/RHSA-2012-0426.html
rhn.redhat.com/errata/RHSA-2012-0488.html
rhn.redhat.com/errata/RHSA-2012-0531.html
rhn.redhat.com/errata/RHSA-2012-1306.html
rhn.redhat.com/errata/RHSA-2012-1307.html
rhn.redhat.com/errata/RHSA-2012-1308.html
secunia.com/advisories/48580
secunia.com/advisories/48895
secunia.com/advisories/48899
www.debian.org/security/2012/dsa-2454
www.openwall.com/lists/oss-security/2012/03/12/3
www.openwall.com/lists/oss-security/2012/03/12/6
www.openwall.com/lists/oss-security/2012/03/12/7
www.openwall.com/lists/oss-security/2012/03/13/2
www.securityfocus.com/bid/52764
www.securitytracker.com/id?1026787
www.ubuntu.com/usn/USN-1424-1
bugzilla.novell.com/show_bug.cgi?id=748738
downloads.avaya.com/css/P8/documents/100162507
www.openwall.com/lists/oss-security/2012/03/12/3
Related
