CVE-2012-2686

crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

39.59% chance of exploitation in the next 30 days, 99th percentile

Published

2013-02-08

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/ssl/openssl_aesni.rb

References

• CVE Record
• NVD entry

Related

• CVE-2012-2661
• CVE-2012-2688
• CVE-2012-2629
• CVE-2012-2698
• CVE-2012-2627
• CVE-2012-2738