NVD

Id
44146  
Name
CVE-2012-2333  
Description
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-05-14  
Modified Date
2016-08-22  
Seq
2012-2333  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221740 44146 CVE-2012-2333 http://cvs.openssl.org/chngview?cn=22538  View
221741 44146 CVE-2012-2333 http://cvs.openssl.org/chngview?cn=22547  View
221742 44146 CVE-2012-2333 APPLE-SA-2013-06-04-1  View
221743 44146 CVE-2012-2333 FEDORA-2012-7939  View
221744 44146 CVE-2012-2333 FEDORA-2012-18035  View
221745 44146 CVE-2012-2333 SSRT100930  View
221746 44146 CVE-2012-2333 SSRT101108  View
221747 44146 CVE-2012-2333 RHSA-2012:1306  View
221748 44146 CVE-2012-2333 RHSA-2012:1307  View
221749 44146 CVE-2012-2333 RHSA-2012:1308  View
221750 44146 CVE-2012-2333 http://support.apple.com/kb/HT5784  View
221751 44146 CVE-2012-2333 http://www.cert.fi/en/reports/2012/vulnerability641549.html  View
221752 44146 CVE-2012-2333 DSA-2475  View
221753 44146 CVE-2012-2333 VU#737740  View
221754 44146 CVE-2012-2333 http://www.openssl.org/news/secadv_20120510.txt  View
221755 44146 CVE-2012-2333 53476  View
221756 44146 CVE-2012-2333 1027057  View
221757 44146 CVE-2012-2333 openssl-tls-record-dos(75525)  View
221758 44146 CVE-2012-2333 https://bugzilla.redhat.com/show_bug.cgi?id=820686  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26693 JVNDB-2012-002400 OpenSSL における整数アンダーフローの脆弱性 OpenSSL には、TLS または DTLS が CBC 暗号化で使用される場合、整数アンダーフローの脆弱性が存在します。 CVE-2012-2333 55571 CVE-2012-2333 44146 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002400.html 2012-05-10 2014-06-26 View