CVE-2012-0027
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST...
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
Exploit likelihood
What each source reports
NVD Score used
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
- Record
CVE-2012-0027- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
- Record
CVE-2012-0027- Updated
- 2026-11-02
EUVDEUVD-2012-0067 No score
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
- Record
EUVD-2012-0067- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6vgp-r5v2-7gfw No score
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST...
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
- Record
GHSA-6vgp-r5v2-7gfw- Updated
- 2026-11-02
OSV No score
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
- Record
CVE-2012-0027- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0027 No score
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
- Record
DEBIAN-CVE-2012-0027- Updated
- 2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2024:10271-1 No score
libopenssl-devel-1.0.2j-2.2 on GA media
These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10271-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10529-1 No score
libopenssl1_0_0-steam-1.0.2h-4.1 on GA media
These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10529-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11127-1 No score
libopenssl-1_1-devel-1.1.1l-1.2 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11127-1- Updated
- 2026-11-02
OSVSUSE-FU-2022:0445-1 No score
Feature update for venv-salt-minion
This feature update for venv-salt-minion provides the following changes:
- Introduce
venv-salt-minion. - Mention fixed issues provided with the bundle.
- Record
SUSE-FU-2022:0445-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslDebian:12 |
before 1.0.0f-1 | 1.0.0f-1 |
opensslDebian:13 |
before 1.0.0f-1 | 1.0.0f-1 |
opensslDebian:14 |
before 1.0.0f-1 | 1.0.0f-1 |
openssl-1_1openSUSE:Tumbleweed From an advisory covering 136 CVEs |
before 1.1.1l-1.2 | 1.1.1l-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-0027 is a medium vulnerability (CVSS 5.0) in Openssl, published January 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.81%, the 92nd percentile. Fixed in openssl 1.0.0f-1.
References
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html
openssl.org/news/secadv_20120104.txt
mandriva.com/security/advisories?name=MDVSA-2012:007
secunia.com/advisories/57353
Show 194 moreShow less
osvdb.org/78191
nvd.nist.gov/vuln/detail/CVE-2012-0027
github.com/advisories/GHSA-6vgp-r5v2-7gfw
security-tracker.debian.org/tracker/CVE-2012-0027
suse.com/support/update/announcement/-2022-445/suse-fu-20220445-1
bugzilla.suse.com/1000080
Left out here: 489 references. The JSON record has them.