CVE-2012-2130

Опубликовано: 06 дек. 2019

Источник: nvd

CVSS3: 7.4

CVSS2: 5.8

EPSS Низкий

Описание

A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys.

Ссылки

http://security.gentoo.org/glsa/glsa-201310-10.xml
Third Party Advisory
http://www.securityfocus.com/bid/53610
Third Party Advisory
VDB Entry
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2012-2130
Issue Tracking
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2130
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75726
Third Party Advisory
VDB Entry
https://security-tracker.debian.org/tracker/CVE-2012-2130
Third Party Advisory
http://security.gentoo.org/glsa/glsa-201310-10.xml
Third Party Advisory
http://www.securityfocus.com/bid/53610
Third Party Advisory
VDB Entry
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2012-2130
Issue Tracking
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2130
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75726
Third Party Advisory
VDB Entry
https://security-tracker.debian.org/tracker/CVE-2012-2130
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:polarssl:polarssl:*:*:*:*:*:*:*:*

Версия от 1.0.0 (включая) до 1.1.1 (включая)

cpe:2.3:a:polarssl:polarssl:0.99:pre4:*:*:*:*:*:*

cpe:2.3:a:polarssl:polarssl:0.99:pre5:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.02202

Низкий

7.4 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-326

Связанные уязвимости

CVE-2012-2130

CVSS3: 7.4

ubuntu

больше 6 лет назад

A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys.

CVE-2012-2130

CVSS3: 7.4

debian

больше 6 лет назад

A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1. ...

GHSA-75jp-83j7-2672

CVSS3: 7.4

github

больше 4 лет назад

A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys.

EPSS

Процентиль: 81%

0.02202

Низкий

7.4 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-326