Servers and applications
CVE-2012-2333 Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
Severity Medium 6.8
Published 14 May 2012
Last changed 16 Jun 2026
Added to UpHeron 21 Oct 2026 Exploit chance 28% in the next 30 daysHigher than 98% of CVEs. EPSS by FIRST , 12 Nov 2026
Attack Over the network · No login needed
Attacker can Read some data · Change some data · Slow it down
CVSS vector AV:N/AC:M/Au:N/C:P/I:P/A:P
Sources NVD Affected software Software Affected versions OpenSSLServers and applications · cpe:a:openssl:openssl Version 1.0.1b Version 1.0.1a Version 1.0.1 Version 1.0.1-beta3 All 96 release lines Every version up to 0.9.8w Version 0.9.1c Version 0.9.2b Version 0.9.3 Version 0.9.3a Version 0.9.4 Version 0.9.5a-beta1 Version 0.9.5a-beta2 Version 0.9.5-beta1 Version 0.9.5-beta2 Version 0.9.5 Version 0.9.5a Version 0.9.6a-beta1 Version 0.9.6a-beta2 Version 0.9.6a-beta3 Version 0.9.6-beta1 Version 0.9.6-beta2 Version 0.9.6-beta3 Version 0.9.6 Version 0.9.6a Version 0.9.6b Version 0.9.6c Version 0.9.6d Version 0.9.6e Version 0.9.6f Version 0.9.6g Version 0.9.6h Version 0.9.6i Version 0.9.6j Version 0.9.6k Version 0.9.6l Version 0.9.6m Version 0.9.7-beta1 Version 0.9.7-beta2 Version 0.9.7-beta3 Version 0.9.7-beta4 Version 0.9.7-beta5 Version 0.9.7-beta6 Version 0.9.7 Version 0.9.7a Version 0.9.7b Version 0.9.7c Version 0.9.7d Version 0.9.7e Version 0.9.7f Version 0.9.7g Version 0.9.7h Version 0.9.7i Version 0.9.7j Version 0.9.7k Version 0.9.7l Version 0.9.7m Version 0.9.8m-beta1 Version 0.9.8 Version 0.9.8a Version 0.9.8b Version 0.9.8c Version 0.9.8d Version 0.9.8e Version 0.9.8f Version 0.9.8g Version 0.9.8h Version 0.9.8i Version 0.9.8j Version 0.9.8k Version 0.9.8l Version 0.9.8m Version 0.9.8n Version 0.9.8o Version 0.9.8p Version 0.9.8q Version 0.9.8r Version 0.9.8s Version 0.9.8t Version 0.9.8u Version 0.9.8v Version 1.0.0-beta1 Version 1.0.0-beta2 Version 1.0.0-beta3 Version 1.0.0-beta4 Version 1.0.0-beta5 Version 1.0.0 Version 1.0.0a Version 1.0.0b Version 1.0.0c Version 1.0.0d Version 1.0.0e Version 1.0.0f Version 1.0.0g Version 1.0.0h Version 1.0.1-beta1 Version 1.0.1-beta2 Version 1.0.1-beta3 Version 1.0.1 Version 1.0.1a Version 1.0.1b
References NVD https://nvd.nist.gov/vuln/detail/CVE-2012-2333 CVE.org https://www.cve.org/CVERecord?id=CVE-2012-2333