CVE-2013-6449
openssl - several
EPSS 21.2%
描述
The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client.
如何修補 CVE-2013-6449
要修補 CVE-2013-6449,請將受影響套件升級到下列已修補版本。
- Debian/openssl—升級至 1.0.1e-5 或更新版本
- Debian/openssl—升級至 1.0.1e-2+deb7u1 或更新版本
CVE-2013-6449 正在被利用嗎?
中等 — EPSS 為 21.2%,可持續追蹤但非最高優先。
受影響套件(2)
- from 0, < 1.0.1e-5
- from 0, < 1.0.1e-2+deb7u1