Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-5268

connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service (file descriptor consumption and crash) via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 because it is a different type of issue.

Published

2013-12-24T19:55:06.943

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-310
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application duckcorp bip ≤ 0.8.8 Yes
Application duckcorp bip 0.8.0 Yes
Application duckcorp bip 0.8.0 Yes
Application duckcorp bip 0.8.0 Yes
Application duckcorp bip 0.8.1 Yes
Application duckcorp bip 0.8.2 Yes
Application duckcorp bip 0.8.3 Yes
Application duckcorp bip 0.8.4 Yes
Application duckcorp bip 0.8.5 Yes
Application duckcorp bip 0.8.6 Yes
Application duckcorp bip 0.8.7 Yes
Operating System fedoraproject fedora 18 Yes
Operating System fedoraproject fedora 19 Yes
Operating System fedoraproject fedora 20 Yes
References