CVE-2013-0166
Fixed in a distro release EPSS 20%
OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
Products: openssl, redhat openssl
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssl | 1.0.1e-1 |
| Debian 13 | openssl | 1.0.1e-1 |
| Debian 14 | openssl | 1.0.1e-1 |
| Debian 6.0 | openssl | 0.9.8o-4squeeze14 |
| Red Hat Enterprise Linux 5 | openssl | 0:0.9.8e-26.el5_9.1 |
| Red Hat Enterprise Linux 5 | openssl-debuginfo | 0:0.9.8e-26.el5_9.1 |
| Red Hat Enterprise Linux 5 | openssl-devel | 0:0.9.8e-26.el5_9.1 |
| Red Hat Enterprise Linux 5 | openssl-perl | 0:0.9.8e-26.el5_9.1 |
| Red Hat Enterprise Linux 6 | openssl | 0:1.0.0-27.el6_4.2 |
| Red Hat Enterprise Linux 6 | openssl-debuginfo | 0:1.0.0-27.el6_4.2 |
| Red Hat Enterprise Linux 6 | openssl-devel | 0:1.0.0-27.el6_4.2 |
| Red Hat Enterprise Linux 6 | openssl-perl | 0:1.0.0-27.el6_4.2 |
| Red Hat Enterprise Linux 6 | openssl-static | 0:1.0.0-27.el6_4.2 |
| Red Hat Enterprise Linux 6 | rhev-hypervisor6 | 0:6.4-20130306.2.el6_4 |
| SUSE Linux Enterprise Desktop 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Desktop 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Server 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Server 12 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Server 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Server 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Server 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Server 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Software Development Kit 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| Ubuntu 14.04 LTS | openssl098 | 0.9.8o-7ubuntu3.2.14.04.1 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 |