CVE-2013-2125

OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service (connection blocking) by keeping a connection open.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
VendorProductVersion
openbsdopensmtpd
𝑥
≤ 5.3.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
opensmtpd
bullseye
6.8.0p2-3
fixed
bookworm
6.8.0p2-4
fixed
sid
7.5.0p0-1
fixed
trixie
7.5.0p0-1
fixed
Common Weakness Enumeration
References
http://git.zx2c4.com/OpenSMTPD/commit/?id=38b26921bad5fe24ad747bf9d591330d683728b0
http://osvdb.org/93495
http://seclists.org/oss-sec/2013/q2/362
http://seclists.org/oss-sec/2013/q2/366
http://secunia.com/advisories/53353
https://exchange.xforce.ibmcloud.com/vulnerabilities/84388
http://git.zx2c4.com/OpenSMTPD/commit/?id=38b26921bad5fe24ad747bf9d591330d683728b0
http://osvdb.org/93495
http://seclists.org/oss-sec/2013/q2/362
http://seclists.org/oss-sec/2013/q2/366
http://secunia.com/advisories/53353
https://exchange.xforce.ibmcloud.com/vulnerabilities/84388