CVE-2012-0050
CVE-2012-0050
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.
EPSS 13,7% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · network
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
openssl Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.0g-1
Actualiza a 1.0.0g-1
openssl Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.0g-1
Actualiza a 1.0.0g-1
openssl Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.0g-1
Actualiza a 1.0.0g-1
Fuentes originales
- http://secunia.com/advisories/48528
- http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:011
- http://secunia.com/advisories/47755
- http://www.securitytracker.com/id?1026548
- http://osvdb.org/78320
- http://support.apple.com/kb/HT5784
- http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
- http://www.securityfocus.com/bid/51563
- http://www.debian.org/security/2012/dsa-2392
- http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03169289
- http://marc.info/?l=bugtraq&m=134039053214295&w=2
- http://secunia.com/advisories/57353
- http://secunia.com/advisories/47631
- http://marc.info/?l=bugtraq&m=133951357207000&w=2
- http://secunia.com/advisories/47677
- http://www.openssl.org/news/secadv_20120118.txt
- http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc
- https://nvd.nist.gov/vuln/detail/CVE-2012-0050