Search for vulnerabilities
Vulnerability ID | VCID-6qtp-pd6p-aaaf |
Aliases |
CVE-2004-0112
VC-OPENSSL-20040317-CVE-2004-0112 |
Summary | A flaw in SSL/TLS handshaking code when using Kerberos ciphersuites. A remote attacker could perform a carefully crafted SSL/TLS handshake against a server configured to use Kerberos ciphersuites in such a way as to cause OpenSSL to crash. Most applications have no ability to use Kerberos ciphersuites and will therefore be unaffected. |
Status | Published |
Exploitability | 0.5 |
Weighted Severity | 8.0 |
Risk | 4.0 |
Affected and Fixed Packages | Package Details |
There are no known CWE. |
Percentile | 0.65061 |
EPSS Score | 0.00245 |
Published At | Nov. 1, 2024, midnight |
Date | Actor | Action | Source | VulnerableCode Version |
---|---|---|---|---|
There are no relevant records. |