CVE-2013-6449

The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote…

published December 23, 2013

CVSS
—
EPSS
21%
Percentile
97.6
In the wild
Unconfirmed
What it is

The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.21174 · 97.6th percentile
Published
2013-12-23T22:00Z
EPSS history
Timeline
  • 23 DEC 22:00Z
    The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote…
    cvelistv5