Every CVE Search/ Get API key

CVE-2012-0050

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote...

5.0 MediumFix available

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.

Exploit likelihood

13.7%Up 6.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.

Record
CVE-2012-0050
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.

Record
CVE-2012-0050
Updated
2026-11-02
EUVDEUVD-2012-0090 No score

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.

Record
EUVD-2012-0090
Updated
2026-11-03
GitHub AdvisoriesGHSA-ph62-8mr5-rp5w No score

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote...

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.

Record
GHSA-ph62-8mr5-rp5w
Updated
2026-11-02
OSVBELL-CVE-2012-0050 5.0

CVE-2012-0050 does not affect BellSoft software

Record
BELL-CVE-2012-0050
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSV No score

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.

Record
CVE-2012-0050
Updated
2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2012-0050 No score

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.

Record
DEBIAN-CVE-2012-0050
Updated
2026-11-02
OSVopenSUSE-SU-2024:10271-1 No score

libopenssl-devel-1.0.2j-2.2 on GA media

These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10271-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10529-1 No score

libopenssl1_0_0-steam-1.0.2h-4.1 on GA media

These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10529-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11127-1 No score

libopenssl-1_1-devel-1.1.1l-1.2 on GA media

These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11127-1
Updated
2026-11-02
OSVSUSE-FU-2022:0445-1 No score

Feature update for venv-salt-minion

This feature update for venv-salt-minion provides the following changes:

  • Introduce venv-salt-minion.
  • Mention fixed issues provided with the bundle.
Record
SUSE-FU-2022:0445-1
Updated
2026-11-02
OSVSUSE-SU-2015:1184-1 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-2015:1184-1
Updated
2026-11-02
OSVSUSE-SU-403 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-403
Updated
2026-11-02
OSVSUSE-SU-403 Forbidden-1 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-403 Forbidden-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssl
Debian:12
 before 1.0.0g-1
1.0.0g-1
openssl
Debian:13
 before 1.0.0g-1
1.0.0g-1
openssl
Debian:14
 before 1.0.0g-1
1.0.0g-1
openssl
Debian:5.0
 before 0.9.8g-15+lenny16, plus listed versions
0.9.8g-150.9.8g-15+lenny10.9.8g-15+lenny110.9.8g-15+lenny120.9.8g-15+lenny13
Show 8 moreShow less
0.9.8g-15+lenny140.9.8g-15+lenny150.9.8g-15+lenny30.9.8g-15+lenny50.9.8g-15+lenny60.9.8g-15+lenny70.9.8g-15+lenny80.9.8g-15+lenny9
0.9.8g-15+lenny16
openssl
Debian:6.0
 before 0.9.8o-4squeeze7, plus listed versions
0.9.8o-40.9.8o-4squeeze10.9.8o-4squeeze20.9.8o-4squeeze30.9.8o-4squeeze40.9.8o-4squeeze4~bpo50+10.9.8o-4squeeze5
0.9.8o-4squeeze7
libqt4
SUSE:Linux Enterprise Desktop 12
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Desktop 12
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Desktop 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Desktop 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Software Development Kit 12
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
Show 22 moreShow less
Affected packages
PackageAffectedFixed
libqt4-devel-doc
SUSE:Linux Enterprise Software Development Kit 12
From an advisory covering 54 CVEs
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Software Development Kit 12
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server 12
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server 12
From an advisory covering 54 CVEs
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server 12
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 54 CVEs
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Workstation Extension 12
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Workstation Extension 12
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Workstation Extension 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Workstation Extension 12 SP1
From an advisory covering 54 CVEs
 before 4.8.6-7.1
4.8.6-7.1
openssl-1_1
openSUSE:Tumbleweed
From an advisory covering 136 CVEs
 before 1.1.1l-1.2
1.1.1l-1.2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0050 is a medium vulnerability (CVSS 5.0) in Openssl, published January 19, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.7%, the 96th percentile. Fixed in openssl 1.0.0g-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 540 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open