CVE-2012-1558: Null Pointer Dereference
Published Mar 12, 2012
·Updated
yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted X.509 certificate.
Affected Software
35 affected components
yaSSL CyaSSL<=2.0.6
yaSSL CyaSSL=0.2.0
yaSSL CyaSSL=0.3.0
yaSSL CyaSSL=0.4.0
yaSSL CyaSSL=0.5.0
yaSSL CyaSSL=0.5.5
yaSSL CyaSSL=0.6.0
yaSSL CyaSSL=0.6.2
yaSSL CyaSSL=0.6.3
yaSSL CyaSSL=0.8.0
yaSSL CyaSSL=0.9.0
yaSSL CyaSSL=0.9.6
yaSSL CyaSSL=0.9.8
yaSSL CyaSSL=0.9.9
yaSSL CyaSSL=1.0.0-rc1
yaSSL CyaSSL=1.0.0-rc2
yaSSL CyaSSL=1.0.0-rc3
yaSSL CyaSSL=1.0.2
yaSSL CyaSSL=1.0.3
yaSSL CyaSSL=1.0.6
yaSSL CyaSSL=1.1.0
yaSSL CyaSSL=1.2.0
yaSSL CyaSSL=1.3.0
yaSSL CyaSSL=1.4.0
yaSSL CyaSSL=1.5.0
yaSSL CyaSSL=1.5.4
yaSSL CyaSSL=1.5.6
yaSSL CyaSSL=1.6.0
yaSSL CyaSSL=1.6.5
yaSSL CyaSSL=1.8.0
yaSSL CyaSSL=1.9.0
yaSSL CyaSSL=2.0.0-rc1
yaSSL CyaSSL=2.0.0-rc2
yaSSL CyaSSL=2.0.0-rc3
yaSSL CyaSSL=2.0.2
Event History
Mar 12, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1558?
CVE-2012-1558 has been classified as a high severity vulnerability due to its potential to cause application crashes through denial of service.
2
How do I fix CVE-2012-1558?
To mitigate CVE-2012-1558, upgrade yaSSL CyaSSL to version 2.0.8 or later.
3
What types of attacks can exploit CVE-2012-1558?
CVE-2012-1558 can be exploited by remote attackers who send crafted X.509 certificates.
4
Which versions of yaSSL CyaSSL are affected by CVE-2012-1558?
CVE-2012-1558 affects yaSSL CyaSSL versions prior to 2.0.8, including versions like 0.2.0 through 2.0.6.
5
What is the impact of CVE-2012-1558 on systems using yaSSL?
The impact of CVE-2012-1558 can result in denial of service due to NULL pointer dereference leading to application crashes.