UpHeron
All vulnerabilities

Servers and applications

CVE-2012-2110

The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an…

Severity
High 7.5
Published
19 Apr 2012
Last changed
16 Jun 2026
Added to UpHeron
21 Oct 2026
Exploit chance
48% in the next 30 daysHigher than 98% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
Memory buffer errors (CWE-119)
Attack
Over the network · No login needed
Attacker can
Read some data · Change some data · Slow it down
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Sources
NVD

Description

The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.

From NVD.

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • Version 1.0.1-beta2
  • Version 1.0.1-beta1
  • Version 1.0.0g
  • Version 1.0.0e
All 88 release lines
  • Every version up to 0.9.8u
  • Version 0.9.1c
  • Version 0.9.2b
  • Version 0.9.3
  • Version 0.9.3a
  • Version 0.9.4
  • Version 0.9.5a-beta1
  • Version 0.9.5a-beta2
  • Version 0.9.5-beta1
  • Version 0.9.5-beta2
  • Version 0.9.5
  • Version 0.9.5a
  • Version 0.9.6a-beta1
  • Version 0.9.6a-beta2
  • Version 0.9.6a-beta3
  • Version 0.9.6-beta1
  • Version 0.9.6-beta2
  • Version 0.9.6-beta3
  • Version 0.9.6
  • Version 0.9.6a
  • Version 0.9.6b
  • Version 0.9.6c
  • Version 0.9.6d
  • Version 0.9.6e
  • Version 0.9.6f
  • Version 0.9.6g
  • Version 0.9.6h
  • Version 0.9.6i
  • Version 0.9.6j
  • Version 0.9.6k
  • Version 0.9.6l
  • Version 0.9.6m
  • Version 0.9.7-beta1
  • Version 0.9.7-beta2
  • Version 0.9.7-beta3
  • Version 0.9.7-beta4
  • Version 0.9.7-beta5
  • Version 0.9.7-beta6
  • Version 0.9.7
  • Version 0.9.7a
  • Version 0.9.7b
  • Version 0.9.7c
  • Version 0.9.7d
  • Version 0.9.7e
  • Version 0.9.7f
  • Version 0.9.7g
  • Version 0.9.7h
  • Version 0.9.7i
  • Version 0.9.7j
  • Version 0.9.7k
  • Version 0.9.7l
  • Version 0.9.7m
  • Version 0.9.8m-beta1
  • Version 0.9.8
  • Version 0.9.8a
  • Version 0.9.8b
  • Version 0.9.8c
  • Version 0.9.8d
  • Version 0.9.8e
  • Version 0.9.8f
  • Version 0.9.8g
  • Version 0.9.8h
  • Version 0.9.8i
  • Version 0.9.8j
  • Version 0.9.8k
  • Version 0.9.8l
  • Version 0.9.8m
  • Version 0.9.8n
  • Version 0.9.8o
  • Version 0.9.8p
  • Version 0.9.8q
  • Version 0.9.8r
  • Version 0.9.8s
  • Version 0.9.8t
  • Version 1.0.0-beta1
  • Version 1.0.0-beta2
  • Version 1.0.0-beta3
  • Version 1.0.0-beta4
  • Version 1.0.0-beta5
  • Version 1.0.0
  • Version 1.0.0a
  • Version 1.0.0b
  • Version 1.0.0c
  • Version 1.0.0d
  • Version 1.0.0e
  • Version 1.0.0g
  • Version 1.0.1-beta1
  • Version 1.0.1-beta2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2012-2110
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2012-2110