FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2012-0050

This CVE name corresponds to:

Entered	Topic
2012-01-20	OpenSSL -- DTLS Denial of Service

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2012-0050 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2012-0050
Phase	Assigned(20111207)

Description

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.

References

Source	Reference
CONFIRM	http://www.openssl.org/news/secadv_20120118.txt
CONFIRM	http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc
CONFIRM	http://support.apple.com/kb/HT5784
CONFIRM	http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
APPLE	APPLE-SA-2013-06-04-1
DEBIAN	DSA-2392
HP	HPSBUX02737
HP	SSRT100747
HP	HPSBOV02793
HP	SSRT100891
MANDRIVA	MDVSA-2012:011
BID	51563
OSVDB	78320
SECTRACK	1026548
SECUNIA	47631
SECUNIA	47677
SECUNIA	47755
SECUNIA	48528
SECUNIA	57353