Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-6449HistoryDec 23, 2013 - 10:55 p.m.
CVE-2013-6449
2013-12-2322:55:03
Debian Security Bug Tracker
security-tracker.debian.org
12
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.9 High
EPSS
Percentile
98.8%
The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.1e-5 | openssl_1.0.1e-5_all.deb |
| Debian | 11 | all | openssl | < 1.0.1e-5 | openssl_1.0.1e-5_all.deb |
| Debian | 999 | all | openssl | < 1.0.1e-5 | openssl_1.0.1e-5_all.deb |
| Debian | 13 | all | openssl | < 1.0.1e-5 | openssl_1.0.1e-5_all.deb |
Related
nessus
nessus
Fedora 18 : openssl-1.0.1e-36.fc18 (2013-23768)
2013-12-23 00:00:00
openSUSE Security Update : openssl (openSUSE-SU-2014:0012-1)
2014-06-13 00:00:00
F5 Networks BIG-IP : OpenSSL vulnerability (SOL15147)
2014-10-10 00:00:00
ubuntucve
ubuntucve
CVE-2013-6449
2013-12-23 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL ssl_get_algorithm2 TLS Denial of Service - ver 2 (CVE-2013-6449)
2014-03-23 00:00:00
OpenSSL ssl_get_algorithm2 TLS Denial of Service (CVE-2013-6449)
2014-03-06 00:00:00
veracode
veracode
Denial Of Service (DoS)
2017-02-08 05:35:02
openvas
openvas
Fedora Update for openssl FEDORA-2013-23788
2014-02-03 00:00:00
Fedora Update for openssl FEDORA-2013-23768
2013-12-23 00:00:00
Fedora Update for openssl FEDORA-2013-23788
2014-02-03 00:00:00
cvelist
cvelist
CVE-2013-6449
2013-12-23 22:00:00
cve
cve
CVE-2013-6449
2013-12-23 22:55:03
f5
f5
SOL15147 - OpenSSL vulnerability CVE-2013-6449
2014-04-10 00:00:00
K15147 : OpenSSL vulnerability CVE-2013-6449
2015-02-04 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: openssl-1.0.1e-36.fc18
2013-12-22 05:32:22
[SECURITY] Fedora 19 Update: openssl-1.0.1e-36.fc19
2013-12-22 05:39:36
[SECURITY] Fedora 20 Update: openssl-1.0.1e-36.fc20
2013-12-22 05:38:41
mageia
mageia
Updated openssl package fixes security vulnerability
2014-01-06 05:23:42
prion
prion
Code injection
2013-12-23 22:55:00
nvd
nvd
CVE-2013-6449
2013-12-23 22:55:03
openssl
openssl
Vulnerability in OpenSSL CVE-2013-6449
2013-12-14 00:00:00
debian
debian
[SECURITY] [DSA 2833-1] openssl security update
2014-01-01 12:09:10
securityvulns
securityvulns
[SECURITY] [DSA 2833-1] openssl security update
2014-01-08 00:00:00
OpenSSL security vulnerabilities
2014-01-08 00:00:00
ibm
ibm
amazon
amazon
Important: openssl
2014-01-14 15:56:00
freebsd
freebsd
openssl -- multiple vulnerabilities
2014-01-06 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-01-09 00:00:00
redhat
redhat
(RHSA-2014:0015) Important: openssl security update
2014-01-08 00:00:00
(RHSA-2014:0416) Important: rhevm-spice-client security update
2014-04-17 00:00:00
(RHSA-2014:0041) Important: rhev-hypervisor6 security update
2014-01-21 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:03.openssl
2014-01-14 00:00:00
oraclelinux
oraclelinux
openssl security update
2014-01-08 00:00:00
openssl security update
2014-10-16 00:00:00
openssl-fips security update
2015-04-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.1f-alt1
2014-01-06 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1f-alt1
2014-01-06 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1f-alt1
2014-01-06 00:00:00
aix
aix
Multiple OpenSSL vulnerabilities
2014-02-25 14:07:48
slackware
slackware
openssl
2014-01-13 22:30:19
centos
centos
openssl security update
2014-01-08 22:59:22
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2014-12-26 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.9 High
EPSS
Percentile
98.8%
Related for DEBIANCVE:CVE-2013-6449