OpenSSL Numeric Errors Vulnerability - CVE-2012-2333 - Vulnerability Database

OpenSSL Numeric Errors Vulnerability - CVE-2012-2333

Medium

Reference: CVE-2012-2333

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-2333

Title: OpenSSL Numeric Errors Vulnerability

Overview:

Integer underflow in OpenSSL before 0.9.8x 1.0.0 before 1.0.0j and 1.0.1 before 1.0.1c when TLS 1.1 TLS 1.2 or DTLS is used with CBC encryption allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.