NULL pointer dereference in OpenSSL



| Updated: 2020-07-28
Risk Medium
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2013-0166
CWE-ID CWE-476
Exploitation vector Network
Public exploit N/A
Vulnerable software
 OpenSSL
Server applications / Encryption software

Vendor OpenSSL Software Foundation

Security Bulletin

This security bulletin contains one medium risk vulnerability.

1) NULL pointer dereference

EUVDB-ID: #VU32724

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2013-0166

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can trigger denial of service conditions via an invalid key.

Mitigation

The vendor has issued the following versions to address this vulnerability: 0.9.8y, 1.0.1d.

Vulnerable software versions

OpenSSL: 0.9.0b - 1.0.1c

CPE2.3 External links

https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=62e4506a7d4cec1c8e1ff687f6b220f6a62a57c7
https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=66e8211c0b1347970096e04b18aa52567c325200
https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=ebc71865f0506a293242bd4aec97cdc7a8ef24b0
https://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html
https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html
https://marc.info/?l=bugtraq&m=136396549913849&w=2
https://marc.info/?l=bugtraq&m=136432043316835&w=2
https://marc.info/?l=bugtraq&m=137545771702053&w=2
https://rhn.redhat.com/errata/RHSA-2013-0587.html
https://rhn.redhat.com/errata/RHSA-2013-0782.html
https://rhn.redhat.com/errata/RHSA-2013-0783.html
https://rhn.redhat.com/errata/RHSA-2013-0833.html
https://secunia.com/advisories/53623
https://secunia.com/advisories/55108
https://secunia.com/advisories/55139
https://support.apple.com/kb/HT5880
https://www.debian.org/security/2013/dsa-2621
https://www.kb.cert.org/vuls/id/737740
https://www.openssl.org/news/secadv_20130204.txt
https://www.splunk.com/view/SP-CAAAHXG
https://bugzilla.redhat.com/show_bug.cgi?id=908052
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18754
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19081
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19360
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19487
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###