NVD

Id
43959  
Name
CVE-2012-2110  
Description
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-04-19  
Modified Date
2016-08-22  
Seq
2012-2110  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220842 43959 CVE-2012-2110 20120419 incorrect integer conversions in OpenSSL can result in memory corruption.  View
220843 43959 CVE-2012-2110 http://cvs.openssl.org/chngview?cn=22431  View
220844 43959 CVE-2012-2110 http://cvs.openssl.org/chngview?cn=22434  View
220845 43959 CVE-2012-2110 http://cvs.openssl.org/chngview?cn=22439  View
220846 43959 CVE-2012-2110 APPLE-SA-2013-06-04-1  View
220847 43959 CVE-2012-2110 FEDORA-2012-6395  View
220848 43959 CVE-2012-2110 FEDORA-2012-18035  View
220849 43959 CVE-2012-2110 SUSE-SU-2012:1149  View
220850 43959 CVE-2012-2110 SSRT100844  View
220851 43959 CVE-2012-2110 SSRT100852  View
220852 43959 CVE-2012-2110 SSRT100891  View
220853 43959 CVE-2012-2110 RHSA-2012:0518  View
220854 43959 CVE-2012-2110 RHSA-2012:0522  View
220855 43959 CVE-2012-2110 RHSA-2012:1306  View
220856 43959 CVE-2012-2110 RHSA-2012:1307  View
220857 43959 CVE-2012-2110 RHSA-2012:1308  View
220858 43959 CVE-2012-2110 http://support.apple.com/kb/HT5784  View
220859 43959 CVE-2012-2110 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564  View
220860 43959 CVE-2012-2110 http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578  View
220861 43959 CVE-2012-2110 DSA-2454  View
220862 43959 CVE-2012-2110 http://www.openssl.org/news/secadv_20120419.txt  View
220863 43959 CVE-2012-2110 1026957  View
220864 43959 CVE-2012-2110 USN-1424-1  View
220865 43959 CVE-2012-2110 HPSBMU02900  View
220866 43959 CVE-2012-2110 https://kb.juniper.net/KB27376  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26392 JVNDB-2012-002099 OpenSSL の asn1_d2i_read_bio 関数におけるバッファオーバーフロー攻撃を誘発される脆弱性 OpenSSL の crypto/asn1/a_d2i_fp.c 内の asn1_d2i_read_bio 関数は、整数データを適切に解釈しないため、バッファオーバーフロー攻撃を誘発される、およびサービス運用妨害 (メモリ破損) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。 CVE-2012-2110 55348 CVE-2012-2110 43959 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002099.html 2012-04-19 2013-06-07 View