CVE-2012-2686 in OpenSSL
요약 (영어)
crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
예약하다
2012. 05. 14.
공개
2013. 02. 08.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 7598 | OpenSSL CBC Ciphersuites 약한 암호화 | 310 | 높음 | 공식 수정 | CVE-2012-2686 |