Main
Vulnerability Database
Exploits
ID:3617 - Exploit for Cryptographic issues in OpenSSL - CVE-2012-2686
ID:3617 - Exploit for Cryptographic issues in OpenSSL - CVE-2012-2686
Published: July 29, 2020
Vulnerability identifier: #VU32723
Vulnerability risk: Medium
CVE-ID: CVE-2012-2686
CWE-ID: CWE-310
Exploitation vector: Remote access
Vulnerable software:
OpenSSL
OpenSSL
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.
Remediation
Install update from vendor's website.