CVE-2011-5268: Medium severity duckcorp bip vulnerability
connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service (file descriptor consumption and crash) via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 because it is a different type of issue.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-5268?
CVE-2011-5268 has a severity rating that indicates it can lead to denial of service due to file descriptor consumption.
How do I fix CVE-2011-5268?
To fix CVE-2011-5268, upgrade to a version of Bip that is 0.8.9 or later.
What versions of Bip are affected by CVE-2011-5268?
Versions of Bip from 0.8.0 up to and including 0.8.8 are affected by CVE-2011-5268.
Is CVE-2011-5268 specific to certain operating systems?
CVE-2011-5268 affects Bip on various operating systems, including Fedora versions 18, 19, and 20.
What type of attack does CVE-2011-5268 enable?
CVE-2011-5268 enables remote attackers to execute a denial of service attack through multiple failed SSL handshakes.