CVE-2012-2686
- State
- Published
- Severity
- Not scored
- Published
- Feb 8, 2013
- Updated
- Aug 6, 2024
- Reserved
- May 14, 2012
Description
crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 57755vdb-entry
- 55139third-party-advisory
- http://www.openssl.org/news/secadv_20130204.txt
- oval:org.mitre.oval:def:18868vdb-entrysignature
- http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=125093b59f3c2a2d33785b5563d929d0472f1721
- SSRT101289vendor-advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001
- APPLE-SA-2013-09-12-1vendor-advisory
- 55108third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=908029
- oval:org.mitre.oval:def:19660vdb-entrysignature
- http://support.apple.com/kb/HT5880
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.