Resource Management Errors Affecting openssl package, versions <1.0.0g-1
Threat Intelligence
EPSS
14.49% (96th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIAN11-OPENSSL-528172
- published 19 Jan 2012
- disclosed 19 Jan 2012
Introduced: 19 Jan 2012
CVE-2012-0050 Open this link in a new tabHow to fix?
Upgrade Debian:11
openssl
to version 1.0.0g-1 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssl
package and not the openssl
package as distributed by Debian
.
See How to fix?
for Debian:11
relevant fixed versions and status.
OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.
References
- https://security-tracker.debian.org/tracker/CVE-2012-0050
- http://support.apple.com/kb/HT5784
- http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
- http://www.debian.org/security/2012/dsa-2392
- http://marc.info/?l=bugtraq&m=133951357207000&w=2
- http://marc.info/?l=bugtraq&m=134039053214295&w=2
- http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc
- http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03169289
- http://osvdb.org/78320
- http://www.openssl.org/news/secadv_20120118.txt
- http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- http://secunia.com/advisories/47631
- http://secunia.com/advisories/47677
- http://secunia.com/advisories/47755
- http://secunia.com/advisories/48528
- http://secunia.com/advisories/57353
- http://www.securityfocus.com/bid/51563
- http://www.securitytracker.com/id?1026548
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:011
CVSS Scores
version 3.1