Description
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 1.0.1c-1 | — |
| Debian 13 | openssl | 1.0.1c-1 | — |
| Debian 12 | openssl | 1.0.1c-1 | — |
| Debian 6.0 | openssl | 0.9.8o-4squeeze13 | DSA-2475-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | openssl098 | 0.9.8o-7ubuntu3.2.14.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | openssl +3 | 1.0.0-20.el6_2.5 | RHSA-2012:0699 |
| RHEL 5 | openssl +2 | 0.9.8e-22.el5_8.4 | RHSA-2012:0699 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP1 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
Advisories 4
- RHSA-2012:0699 Red Hat Security Advisory: openssl security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2475-1 openssl - integer underflow Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-403 Forbidden-1 Security update for OpenSSL SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-403 Security update for OpenSSL SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 53476 vdb-entry
- 49116 third-party-advisory
- SSRT100930 vendor-advisory
- FEDORA-2012-18035 vendor-advisory
- 51312 third-party-advisory
- RHSA-2012:1308 vendor-advisory
- http://cvs.openssl.org/chngview?cn=22538
- RHSA-2012:1307 vendor-advisory
- SSRT101108 vendor-advisory
- http://support.apple.com/kb/HT5784
- APPLE-SA-2013-06-04-1 vendor-advisory
- 49208 third-party-advisory
- VU#737740 third-party-advisory
- SUSE-SU-2012:0679 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=820686
- http://cvs.openssl.org/chngview?cn=22547
- RHSA-2012:1306 vendor-advisory
- 50768 third-party-advisory
- 49324 third-party-advisory
- openssl-tls-record-dos(75525) vdb-entry
- SUSE-SU-2012:0678 vendor-advisory
- http://www.openssl.org/news/secadv_20120510.txt
- 1027057 vdb-entry
- FEDORA-2012-7939 vendor-advisory
- http://www.cert.fi/en/reports/2012/vulnerability641549.html
- DSA-2475 vendor-advisory
- MDVSA-2012:073 vendor-advisory
- RHSA-2012:0699 vendor-advisory