CVE-2012-2131
- State
- Published
- Severity
- Not scored
- Published
- Apr 24, 2012
- Updated
- Aug 6, 2024
- Reserved
- Apr 4, 2012
Description
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- SUSE-SU-2012:0623vendor-advisory
- SUSE-SU-2012:1149vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- MDVSA-2012:064vendor-advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
- USN-1428-1vendor-advisory
- http://cvs.openssl.org/chngview?cn=22479
- http://www.openssl.org/news/secadv_20120424.txt
- DSA-2454vendor-advisory
- http://support.apple.com/kb/HT5784
- APPLE-SA-2013-06-04-1vendor-advisory
- 48895third-party-advisory
- openssl-asn1-code-execution(75099)vdb-entry
- 48956third-party-advisory
- [oss-security] 20120424 Re: OpenSSL ASN1 BIO vulnerability (CVE-2012-2110)mailing-list
- SUSE-SU-2012:0637vendor-advisory
- HPSBOV02793vendor-advisory
- 57353third-party-advisory
- HPSBUX02782vendor-advisory
- 1026957vdb-entry
- 53212vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.