CVE-2013-4550: Medium severity red hat fedora vulnerability
Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated with stderr before stderr has been closed, which allows remote attackers to write to other sockets and have an unspecified impact via a failed SSL handshake, a different vulnerability than CVE-2011-5268. NOTE: some sources originally mapped this CVE to two different types of issues; this CVE has since been SPLIT, producing CVE-2011-5268.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4550?
CVE-2013-4550 is classified as a medium severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2013-4550?
To fix CVE-2013-4550, upgrade Bip to version 0.8.9 or higher.
Which versions of Bip are affected by CVE-2013-4550?
Bip versions prior to 0.8.9 are vulnerable to CVE-2013-4550.
Can CVE-2013-4550 be exploited remotely?
Yes, CVE-2013-4550 allows remote attackers to exploit the vulnerability during SSL handshake failures.
Is Fedora 18 affected by CVE-2013-4550?
Yes, Fedora 18 is affected by CVE-2013-4550 due to its use of vulnerable Bip versions.