CVE-2012-0884
- State
- Published
- Severity
- Not scored
- Published
- Mar 13, 2012
- Updated
- Aug 6, 2024
- Reserved
- Jan 19, 2012
Description
The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- FEDORA-2012-4630vendor-advisory
- RHSA-2012:0531vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- FEDORA-2012-18035vendor-advisory
- https://downloads.avaya.com/css/P8/documents/100162507
- RHSA-2012:1308vendor-advisory
- openSUSE-SU-2012:0547vendor-advisory
- RHSA-2012:1307vendor-advisory
- http://www.openssl.org/news/secadv_20120312.txt
- 48916third-party-advisory
- RHSA-2012:0488vendor-advisory
- DSA-2454vendor-advisory
- 48895third-party-advisory
- 48580third-party-advisory
- VU#737740third-party-advisory
- RHSA-2012:1306vendor-advisory
- FEDORA-2012-4665vendor-advisory
- HPSBOV02793vendor-advisory
- 57353third-party-advisory
- RHSA-2012:0426vendor-advisory
- HPSBUX02782vendor-advisory
- SSRT100852vendor-advisory
- FEDORA-2012-4659vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.