Cloudanix VulnDB

CVE-2013-6450

None

CVSS

—

EPSS

15.3%

Published

Jan 1, 2014

CISA due date

—

The record

The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context and cause a denial of service (application crash) by interfering with packet delivery, related to ssl/d1_both.c and ssl/t1_enc.c.

Affected packages

Ecosystem Package Introduced Fixed
Debian:10 openssl 0 1.0.1e-5
Debian:11 openssl 0 1.0.1e-5
Debian:12 openssl 0 1.0.1e-5
Debian:13 openssl 0 1.0.1e-5
Debian:7 openssl 0 1.0.1e-2+deb7u1
Mageia:3 openssl 0 1.0.1e-1.3.mga3
Red Hat:enterprise_linux:6::client openssl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::client openssl-debuginfo 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::client openssl-devel 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::client openssl-perl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::client openssl-static 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl-debuginfo 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl-devel 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl-perl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::computenode openssl-static 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl-debuginfo 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl-devel 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl-perl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::server openssl-static 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl-debuginfo 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl-devel 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl-perl 0 0:1.0.1e-16.el6_5.4
Red Hat:enterprise_linux:6::workstation openssl-static 0 0:1.0.1e-16.el6_5.4
openSUSE:Tumbleweed openssl-1_1 0 1.1.1l-1.2

Related vulnerabilities