CVE-2012-2131: Buffer Overflow
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2131?
CVE-2012-2131 is rated as a critical vulnerability due to its potential to cause denial of service and possible remote code execution.
How do I fix CVE-2012-2131?
To mitigate CVE-2012-2131, upgrade OpenSSL to a version later than 0.9.8v that addresses this vulnerability.
What are the potential impacts of CVE-2012-2131?
CVE-2012-2131 can lead to memory corruption, denial of service attacks, or potentially allow unauthorized access through crafted DER data.
Who is affected by CVE-2012-2131?
CVE-2012-2131 affects systems using OpenSSL version 0.9.8v, particularly those that handle X.509 certificates or related data.
Is there a workaround for CVE-2012-2131?
There are no known effective workarounds for CVE-2012-2131, so upgrading the OpenSSL version is the recommended approach.