NVD

Id
43979  
Name
CVE-2012-2131  
Description
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-04-24  
Modified Date
2016-12-07  
Seq
2012-2131  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221010 43979 CVE-2012-2131 http://cvs.openssl.org/chngview?cn=22479  View
221011 43979 CVE-2012-2131 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673  View
221012 43979 CVE-2012-2131 APPLE-SA-2013-06-04-1  View
221013 43979 CVE-2012-2131 SUSE-SU-2012:1149  View
221014 43979 CVE-2012-2131 SSRT100844  View
221015 43979 CVE-2012-2131 SSRT100891  View
221016 43979 CVE-2012-2131 http://support.apple.com/kb/HT5784  View
221017 43979 CVE-2012-2131 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564  View
221018 43979 CVE-2012-2131 DSA-2454  View
221019 43979 CVE-2012-2131 http://www.openssl.org/news/secadv_20120424.txt  View
221020 43979 CVE-2012-2131 [oss-security] 20120424 Re: OpenSSL ASN1 BIO vulnerability (CVE-2012-2110)  View
221021 43979 CVE-2012-2131 53212  View
221022 43979 CVE-2012-2131 1026957  View
221023 43979 CVE-2012-2131 USN-1428-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26419 JVNDB-2012-002126 OpenSSL の crypto/buffer/buffer.c における整数符号エラーの脆弱性 OpenSSL の crypto/buffer/buffer.c には、整数符号エラーの脆弱性が存在します。この脆弱性は CVE-2012-2110 に対する不完全な修正に含まれています。 CVE-2012-2131 55369 CVE-2012-2131 43979 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002126.html 2012-04-23 2013-06-07 View