Description

crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.

Remediation

References

CVE-2012-2686

Related Vulnerabilities

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-5205)

PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1868)

WordPress Plugin WP e-Commerce-Store Exporter Privilege Escalation (1.6.6)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-46333)

WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Information Disclosure (9.7.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2012-2686