CVE-2012-2333
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when...
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
Exploit likelihood
What each source reports
NVD Score used
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
- Record
CVE-2012-2333- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
- Record
CVE-2012-2333- Updated
- 2026-11-02
EUVDEUVD-2012-2326 No score
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
- Record
EUVD-2012-2326- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-45m2-xm5p-3949 No score
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when...
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
- Record
GHSA-45m2-xm5p-3949- Updated
- 2026-11-02
OSV No score
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
- Record
CVE-2012-2333- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2333 No score
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
- Record
DEBIAN-CVE-2012-2333- Updated
- 2026-11-02
Show 4 moreShow less
OSVSUSE-SU-2015:1184-1 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-2015:1184-1- Updated
- 2026-11-02
OSVSUSE-SU-403 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-403- Updated
- 2026-11-02
OSVSUSE-SU-403 Forbidden-1 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-403 Forbidden-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2333 No score
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
- Record
UBUNTU-CVE-2012-2333- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslDebian:12 |
before 1.0.1c-1 | 1.0.1c-1 |
opensslDebian:13 |
before 1.0.1c-1 | 1.0.1c-1 |
opensslDebian:14 |
before 1.0.1c-1 | 1.0.1c-1 |
opensslDebian:6.0 |
before 0.9.8o-4squeeze13, plus listed versions 0.9.8o-40.9.8o-4squeeze10.9.8o-4squeeze110.9.8o-4squeeze120.9.8o-4squeeze2 Show 7 moreShow less0.9.8o-4squeeze30.9.8o-4squeeze40.9.8o-4squeeze4~bpo50+10.9.8o-4squeeze50.9.8o-4squeeze70.9.8o-4squeeze80.9.8o-4squeeze9 |
0.9.8o-4squeeze13 |
opensslRed Hat:enterprise_linux:5::client |
before 0:0.9.8e-22.el5_8.4 | 0:0.9.8e-22.el5_8.4 |
openssl-debuginfoRed Hat:enterprise_linux:5::client |
before 0:0.9.8e-22.el5_8.4 | 0:0.9.8e-22.el5_8.4 |
openssl-perlRed Hat:enterprise_linux:5::client |
before 0:0.9.8e-22.el5_8.4 | 0:0.9.8e-22.el5_8.4 |
opensslRed Hat:enterprise_linux:5::client_workstation |
before 0:0.9.8e-22.el5_8.4 | 0:0.9.8e-22.el5_8.4 |
openssl-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:0.9.8e-22.el5_8.4 | 0:0.9.8e-22.el5_8.4 |
openssl-develRed Hat:enterprise_linux:5::client_workstation |
before 0:0.9.8e-22.el5_8.4 | 0:0.9.8e-22.el5_8.4 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
opensslRed Hat:enterprise_linux:5::server |
before 0:0.9.8e-22.el5_8.4 | 0:0.9.8e-22.el5_8.4 |
openssl-debuginfoRed Hat:enterprise_linux:5::server |
before 0:0.9.8e-22.el5_8.4 | 0:0.9.8e-22.el5_8.4 |
openssl-develRed Hat:enterprise_linux:5::server |
before 0:0.9.8e-22.el5_8.4 | 0:0.9.8e-22.el5_8.4 |
openssl-perlRed Hat:enterprise_linux:5::server |
before 0:0.9.8e-22.el5_8.4 | 0:0.9.8e-22.el5_8.4 |
opensslRed Hat:enterprise_linux:6::client |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-debuginfoRed Hat:enterprise_linux:6::client |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-develRed Hat:enterprise_linux:6::client |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-perlRed Hat:enterprise_linux:6::client |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-staticRed Hat:enterprise_linux:6::client |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
opensslRed Hat:enterprise_linux:6::computenode |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-develRed Hat:enterprise_linux:6::computenode |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-perlRed Hat:enterprise_linux:6::computenode |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-staticRed Hat:enterprise_linux:6::computenode |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
opensslRed Hat:enterprise_linux:6::server |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-develRed Hat:enterprise_linux:6::server |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-perlRed Hat:enterprise_linux:6::server |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-staticRed Hat:enterprise_linux:6::server |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
opensslRed Hat:enterprise_linux:6::workstation |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-develRed Hat:enterprise_linux:6::workstation |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-perlRed Hat:enterprise_linux:6::workstation |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
openssl-staticRed Hat:enterprise_linux:6::workstation |
before 0:1.0.0-20.el6_2.5 | 0:1.0.0-20.el6_2.5 |
libqt4SUSE:Linux Enterprise Desktop 12 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Desktop 12 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Desktop 12 SP1 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Desktop 12 SP1 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Software Development Kit 12 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Software Development Kit 12 |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Software Development Kit 12 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server 12 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server 12 |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server 12 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server for SAP Applications 12 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server for SAP Applications 12 |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server 12 SP1 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server 12 SP1 |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server 12 SP1 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Workstation Extension 12 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Workstation Extension 12 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Workstation Extension 12 SP1 |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Workstation Extension 12 SP1 |
before 4.8.6-7.1 | 4.8.6-7.1 |
openssl098Ubuntu:14.04:LTS |
before 0.9.8o-7ubuntu3.2.14.04.1, plus listed versions 0.9.8o-7ubuntu3.1 |
0.9.8o-7ubuntu3.2.14.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2333 is a medium vulnerability (CVSS 6.8) in Openssl, published May 14, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 27.9%, the 98th percentile. Fixed in openssl 1.0.1c-1.
References
securityfocus.com/bid/53476
secunia.com/advisories/49116
marc.info?l=bugtraq&m=134919053717161&w=2
lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html
rhn.redhat.com/errata/RHSA-2012-1308.html
Show 153 moreShow less
cvs.openssl.org/chngview?cn=22538
support.apple.com/kb/HT5784
lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
kb.cert.org/vuls/id/737740
lists.opensuse.org/opensuse-security-announce/2012-05/msg00020.html
bugzilla.redhat.com/show_bug.cgi?id=820686
exchange.xforce.ibmcloud.com/vulnerabilities/75525
openssl.org/news/secadv_20120510.txt
securitytracker.com/id?1027057
cert.fi/en/reports/2012/vulnerability641549.html
debian.org/security/2012/dsa-2475
mandriva.com/security/advisories?name=MDVSA-2012:073
nvd.nist.gov/vuln/detail/CVE-2012-2333
github.com/advisories/GHSA-45m2-xm5p-3949
security-tracker.debian.org/tracker/CVE-2012-2333
access.redhat.com/errata/RHSA-2012:0699
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0699.json
cve.org/CVERecord?id=CVE-2012-2333
suse.com/support/update/announcement/2015/suse-su-20151184-1
bugzilla.suse.com/608666
ubuntu.com/security/CVE-2012-2333