Cloudanix VulnDB

CVE-2013-6449

None

CVSS

—

EPSS

21.2%

Published

Dec 23, 2013

CISA due date

—

The record

The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 openssl 0 1.0.1e-5
Debian:12 openssl 0 1.0.1e-5
Debian:13 openssl 0 1.0.1e-5
Debian:7 openssl 0 1.0.1e-2+deb7u1
Mageia:3 openssl 0 1.0.1e-1.2.mga3
Red Hat:enterprise_linux:6::client openssl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::client openssl-debuginfo 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::client openssl-devel 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::client openssl-perl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::client openssl-static 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl-debuginfo 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl-devel 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl-perl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl-static 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::hypervisor rhev-hypervisor6 0 0:6.5-20140112.0.el6ev
Red Hat:enterprise_linux:6::server openssl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl-debuginfo 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl-devel 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl-perl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl-static 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl-debuginfo 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl-devel 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl-perl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl-static 0 0:1.0.1e-16.el6_5.4
openSUSE:Tumbleweed openssl-1_1 0 1.1.1l-1.2

Related vulnerabilities