CVE-2013-2125 | BDVDB-2026-61823 Detail

Description#

OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service (connection blocking) by keeping a connection open.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/oss-sec/2013/q2/362
http://git.zx2c4.com/OpenSMTPD/commit/?id=38b26921bad5fe24ad747bf9d591330d683728b0
http://secunia.com/advisories/53353
https://exchange.xforce.ibmcloud.com/vulnerabilities/84388
http://seclists.org/oss-sec/2013/q2/366
http://osvdb.org/93495

Exploit#

No public exploit known

History#

Version 12014-05-27Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.