CVE-2012-2333

Description

Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

6.763

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2012-2333 are fixed in OpenSSL (x64) 0.9.8x	Windows
Vulnerabilities CVE-2012-2333 are fixed in OpenSSL (x64) 1.0.0j	Windows
Vulnerabilities CVE-2012-2333 are fixed in OpenSSL (x64) 1.0.1c	Windows
CVE-2012-2333	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234