CVE-2012-2333
Fixed in a distro release EPSS 28%
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
Products: openssl, redhat openssl
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssl | 1.0.1c-1 |
| Debian 13 | openssl | 1.0.1c-1 |
| Debian 14 | openssl | 1.0.1c-1 |
| Debian 6.0 | openssl | 0.9.8o-4squeeze13 |
| Red Hat Enterprise Linux 5 | openssl | 0:0.9.8e-22.el5_8.4 |
| Red Hat Enterprise Linux 5 | openssl-debuginfo | 0:0.9.8e-22.el5_8.4 |
| Red Hat Enterprise Linux 5 | openssl-devel | 0:0.9.8e-22.el5_8.4 |
| Red Hat Enterprise Linux 5 | openssl-perl | 0:0.9.8e-22.el5_8.4 |
| Red Hat Enterprise Linux 6 | openssl | 0:1.0.0-20.el6_2.5 |
| Red Hat Enterprise Linux 6 | openssl-debuginfo | 0:1.0.0-20.el6_2.5 |
| Red Hat Enterprise Linux 6 | openssl-devel | 0:1.0.0-20.el6_2.5 |
| Red Hat Enterprise Linux 6 | openssl-perl | 0:1.0.0-20.el6_2.5 |
| Red Hat Enterprise Linux 6 | openssl-static | 0:1.0.0-20.el6_2.5 |
| SUSE Linux Enterprise Desktop 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Desktop 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Server 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Server 12 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Server 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Server 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Server 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Server 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Software Development Kit 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| Ubuntu 14.04 LTS | openssl098 | 0.9.8o-7ubuntu3.2.14.04.1 |