CVE Vulnerabilities

CVE-2012-0027

Published: Jan 06, 2012 | Modified: Mar 26, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
5 MODERATE
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
MEDIUM

The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.

Affected Software

Name Vendor Start Version End Version
Openssl Openssl * 1.0.0e (including)
Openssl Openssl 0.9.1c (including) 0.9.1c (including)
Openssl Openssl 0.9.2b (including) 0.9.2b (including)
Openssl Openssl 0.9.3 (including) 0.9.3 (including)
Openssl Openssl 0.9.3a (including) 0.9.3a (including)
Openssl Openssl 0.9.4 (including) 0.9.4 (including)
Openssl Openssl 0.9.5 (including) 0.9.5 (including)
Openssl Openssl 0.9.5a (including) 0.9.5a (including)
Openssl Openssl 0.9.6 (including) 0.9.6 (including)
Openssl Openssl 0.9.6a (including) 0.9.6a (including)
Openssl Openssl 0.9.6b (including) 0.9.6b (including)
Openssl Openssl 0.9.6c (including) 0.9.6c (including)
Openssl Openssl 0.9.6d (including) 0.9.6d (including)
Openssl Openssl 0.9.6e (including) 0.9.6e (including)
Openssl Openssl 0.9.6f (including) 0.9.6f (including)
Openssl Openssl 0.9.6g (including) 0.9.6g (including)
Openssl Openssl 0.9.6h (including) 0.9.6h (including)
Openssl Openssl 0.9.6h-bogus (including) 0.9.6h-bogus (including)
Openssl Openssl 0.9.6i (including) 0.9.6i (including)
Openssl Openssl 0.9.6j (including) 0.9.6j (including)
Openssl Openssl 0.9.6k (including) 0.9.6k (including)
Openssl Openssl 0.9.6l (including) 0.9.6l (including)
Openssl Openssl 0.9.6m (including) 0.9.6m (including)
Openssl Openssl 0.9.7 (including) 0.9.7 (including)
Openssl Openssl 0.9.7a (including) 0.9.7a (including)
Openssl Openssl 0.9.7b (including) 0.9.7b (including)
Openssl Openssl 0.9.7c (including) 0.9.7c (including)
Openssl Openssl 0.9.7d (including) 0.9.7d (including)
Openssl Openssl 0.9.7e (including) 0.9.7e (including)
Openssl Openssl 0.9.7f (including) 0.9.7f (including)
Openssl Openssl 0.9.7g (including) 0.9.7g (including)
Openssl Openssl 0.9.7h (including) 0.9.7h (including)
Openssl Openssl 0.9.7i (including) 0.9.7i (including)
Openssl Openssl 0.9.7j (including) 0.9.7j (including)
Openssl Openssl 0.9.7k (including) 0.9.7k (including)
Openssl Openssl 0.9.7l (including) 0.9.7l (including)
Openssl Openssl 0.9.7m (including) 0.9.7m (including)
Openssl Openssl 0.9.8 (including) 0.9.8 (including)
Openssl Openssl 0.9.8a (including) 0.9.8a (including)
Openssl Openssl 0.9.8b (including) 0.9.8b (including)
Openssl Openssl 0.9.8c (including) 0.9.8c (including)
Openssl Openssl 0.9.8d (including) 0.9.8d (including)
Openssl Openssl 0.9.8e (including) 0.9.8e (including)
Openssl Openssl 0.9.8f (including) 0.9.8f (including)
Openssl Openssl 0.9.8g (including) 0.9.8g (including)
Openssl Openssl 0.9.8h (including) 0.9.8h (including)
Openssl Openssl 0.9.8i (including) 0.9.8i (including)
Openssl Openssl 0.9.8j (including) 0.9.8j (including)
Openssl Openssl 0.9.8k (including) 0.9.8k (including)
Openssl Openssl 0.9.8l (including) 0.9.8l (including)
Openssl Openssl 0.9.8m (including) 0.9.8m (including)
Openssl Openssl 0.9.8n (including) 0.9.8n (including)
Openssl Openssl 0.9.8o (including) 0.9.8o (including)
Openssl Openssl 0.9.8p (including) 0.9.8p (including)
Openssl Openssl 0.9.8q (including) 0.9.8q (including)
Openssl Openssl 0.9.8r (including) 0.9.8r (including)
Openssl Openssl 0.9.8s (including) 0.9.8s (including)
Openssl Openssl 1.0.0 (including) 1.0.0 (including)
Openssl Openssl 1.0.0-beta1 (including) 1.0.0-beta1 (including)
Openssl Openssl 1.0.0-beta2 (including) 1.0.0-beta2 (including)
Openssl Openssl 1.0.0-beta3 (including) 1.0.0-beta3 (including)
Openssl Openssl 1.0.0-beta4 (including) 1.0.0-beta4 (including)
Openssl Openssl 1.0.0-beta5 (including) 1.0.0-beta5 (including)
Openssl Openssl 1.0.0a (including) 1.0.0a (including)
Openssl Openssl 1.0.0b (including) 1.0.0b (including)
Openssl Openssl 1.0.0c (including) 1.0.0c (including)
Openssl Openssl 1.0.0d (including) 1.0.0d (including)
Openssl Ubuntu oneiric *
Openssl Ubuntu upstream *
Openssl098 Ubuntu upstream *

References