CVE-2013-0166
08.02.2013, 19:55
OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| openssl | openssl | 0.9.1c |
| openssl | openssl | 0.9.2b |
| openssl | openssl | 0.9.3 |
| openssl | openssl | 0.9.3a |
| openssl | openssl | 0.9.4 |
| openssl | openssl | 0.9.5 |
| openssl | openssl | 0.9.5:beta1 |
| openssl | openssl | 0.9.5:beta2 |
| openssl | openssl | 0.9.5a |
| openssl | openssl | 0.9.6 |
| openssl | openssl | 0.9.6:beta1 |
| openssl | openssl | 0.9.6:beta2 |
| openssl | openssl | 0.9.6:beta3 |
| openssl | openssl | 0.9.6a |
| openssl | openssl | 0.9.6b |
| openssl | openssl | 0.9.6c |
| openssl | openssl | 0.9.6d |
| openssl | openssl | 0.9.6e |
| openssl | openssl | 0.9.6f |
| openssl | openssl | 0.9.6g |
| openssl | openssl | 0.9.6h |
| openssl | openssl | 0.9.6i |
| openssl | openssl | 0.9.6j |
| openssl | openssl | 0.9.6k |
| openssl | openssl | 0.9.6l |
| openssl | openssl | 0.9.6m |
| openssl | openssl | 0.9.7 |
| openssl | openssl | 0.9.7:beta1 |
| openssl | openssl | 0.9.7:beta2 |
| openssl | openssl | 0.9.7:beta3 |
| openssl | openssl | 0.9.7:beta4 |
| openssl | openssl | 0.9.7:beta5 |
| openssl | openssl | 0.9.7:beta6 |
| openssl | openssl | 0.9.7a |
| openssl | openssl | 0.9.7b |
| openssl | openssl | 0.9.7c |
| openssl | openssl | 0.9.7d |
| openssl | openssl | 0.9.7e |
| openssl | openssl | 0.9.7f |
| openssl | openssl | 0.9.7g |
| openssl | openssl | 0.9.7h |
| openssl | openssl | 0.9.7i |
| openssl | openssl | 0.9.7j |
| openssl | openssl | 0.9.7k |
| openssl | openssl | 0.9.7l |
| openssl | openssl | 0.9.7m |
| openssl | openssl | 0.9.8 |
| openssl | openssl | 0.9.8a |
| openssl | openssl | 0.9.8b |
| openssl | openssl | 0.9.8c |
| openssl | openssl | 0.9.8d |
| openssl | openssl | 0.9.8e |
| openssl | openssl | 0.9.8f |
| openssl | openssl | 0.9.8g |
| openssl | openssl | 0.9.8h |
| openssl | openssl | 0.9.8i |
| openssl | openssl | 0.9.8j |
| openssl | openssl | 0.9.8k |
| openssl | openssl | 0.9.8l |
| openssl | openssl | 0.9.8m |
| openssl | openssl | 0.9.8n |
| openssl | openssl | 0.9.8o |
| openssl | openssl | 0.9.8p |
| openssl | openssl | 0.9.8q |
| openssl | openssl | 0.9.8r |
| openssl | openssl | 0.9.8s |
| openssl | openssl | 0.9.8t |
| openssl | openssl | 0.9.8u |
| openssl | openssl | 0.9.8v |
| openssl | openssl | 0.9.8w |
| openssl | openssl | 0.9.8x |
| openssl | openssl | 1.0.0 |
| openssl | openssl | 1.0.0a |
| openssl | openssl | 1.0.0b |
| openssl | openssl | 1.0.0c |
| openssl | openssl | 1.0.0d |
| openssl | openssl | 1.0.0e |
| openssl | openssl | 1.0.0f |
| openssl | openssl | 1.0.0g |
| openssl | openssl | 1.0.0h |
| openssl | openssl | 1.0.0i |
| openssl | openssl | 1.0.0j |
| openssl | openssl | 1.0.1 |
| openssl | openssl | 1.0.1a |
| openssl | openssl | 1.0.1b |
| openssl | openssl | 1.0.1c |
| redhat | openssl | 0.9.6-15 |
| redhat | openssl | 0.9.6b-3 |
| redhat | openssl | 0.9.7a-2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| openssl |
| ||||||||||||||||
| openssl098 |
|
openSUSE / SLES Releases
Red Hat Enterprise Linux Releases
Amazon Linux Releases
Common Weakness Enumeration
References
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=62e4506a7d4cec1c8e1ff687f6b220f6a62a57c7
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=66e8211c0b1347970096e04b18aa52567c325200
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=ebc71865f0506a293242bd4aec97cdc7a8ef24b0
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=62e4506a7d4cec1c8e1ff687f6b220f6a62a57c7
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=66e8211c0b1347970096e04b18aa52567c325200