CVE-2013-4353

The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and…

published January 9, 2014

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11851 · 96.1th percentile
Published
2014-01-09T01:00Z
EPSS history
Timeline
  • 09 JAN 01:00Z
    The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and…
    cvelistv5