VDB
CVE-2013-4550
CVE-2013-4550
PUBLISHED
CVSS 5.099999904632568 MEDIUM
Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated with stderr before stderr has been closed, which allows remote attackers to write to other sockets and have an unspecified impact via a failed SSL handshake, a different vulnerability than CVE-2011-5268. NOTE: some sources originally mapped this CVE to two different types of issues; this CVE has since been SPLIT, producing CVE-2011-5268.
EPSS 2.22% · 82.6th percentile
Risk Scores
CVSS 2.0
5.099999904632568
EPSS Score
2.22%
82.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| fedoraproject | fedora | 19, 20, 18 |
| n/a | n/a | n/a |
| duckcorp | bip | 0.8.0, 0.8.1, 0.8.2 |
Timeline
- Dec 24, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- May 30, 2023 EPSS Score
- Jul 22, 2023 EPSS Score
References
- https://projects.duckcorp.org/issues/261 url
- https://projects.duckcorp.org/versions/13 url
- FEDORA-2013-21060 vendor-advisory
- FEDORA-2013-21006 vendor-advisory
- FEDORA-2013-21018 vendor-advisory
- [oss-security] 20140102 Re: Duplicated CVE assignment for bip mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2013-4550 advisory