CVE-2012-0050
CVE-2012-0050
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.
EPSS 13.7% · Fix available
- Published
- Updated
Affected products and versions
Original sources
- http://secunia.com/advisories/48528
- http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:011
- http://secunia.com/advisories/47755
- http://www.securitytracker.com/id?1026548
- http://osvdb.org/78320
- http://support.apple.com/kb/HT5784
- http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
- http://www.securityfocus.com/bid/51563
- http://www.debian.org/security/2012/dsa-2392
- http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03169289
- http://marc.info/?l=bugtraq&m=134039053214295&w=2
- http://secunia.com/advisories/57353
- http://secunia.com/advisories/47631
- http://marc.info/?l=bugtraq&m=133951357207000&w=2
- http://secunia.com/advisories/47677
- http://www.openssl.org/news/secadv_20120118.txt
- http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc
- https://nvd.nist.gov/vuln/detail/CVE-2012-0050