p PatchFirst

CVE-2012-2686

CVE-2012-2686

This page contains facts from public vulnerability sources. Check the original advisory before updating.

crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.

EPSS 39.6% · Public exploit · Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openssl Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.0.1e-1

    Update to 1.0.1e-1

  • openssl Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.0.1e-1

    Update to 1.0.1e-1

  • openssl Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.0.1e-1

    Update to 1.0.1e-1

Original sources

Check your server →