Cloudanix VulnDB

CVE-2013-4353

None

CVSS

—

EPSS

11.9%

Published

Jan 9, 2014

CISA due date

—

The record

The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 openssl 0 1.0.1f-1
Debian:12 openssl 0 1.0.1f-1
Debian:13 openssl 0 1.0.1f-1
Debian:7 openssl 0 1.0.1e-2+deb7u3
Mageia:3 openssl 0 1.0.1e-1.3.mga3
Red Hat:enterprise_linux:6::client openssl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::client openssl-debuginfo 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::client openssl-devel 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::client openssl-perl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::client openssl-static 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl-debuginfo 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl-devel 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl-perl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl-static 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::hypervisor rhev-hypervisor6 0 0:6.5-20140112.0.el6ev
Red Hat:enterprise_linux:6::server openssl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl-debuginfo 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl-devel 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl-perl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl-static 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl-debuginfo 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl-devel 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl-perl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl-static 0 0:1.0.1e-16.el6_5.4
Red Hat:rhev_manager:3 rhevm-spice-client 0 0:3.3-12.el6_5
Red Hat:rhev_manager:3 rhevm-spice-client-x64-cab 0 0:3.3-12.el6_5
Red Hat:rhev_manager:3 rhevm-spice-client-x64-msi 0 0:3.3-12.el6_5
Red Hat:rhev_manager:3 rhevm-spice-client-x86-cab 0 0:3.3-12.el6_5
Red Hat:rhev_manager:3 rhevm-spice-client-x86-msi 0 0:3.3-12.el6_5
openSUSE:Tumbleweed openssl-1_1 0 1.1.1l-1.2

Related vulnerabilities