VDB
CVE-2013-4550
CVE-2013-4550
PUBLISHED
CVSS 5.099999904632568 MEDIUM
Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated with stderr before stderr has been closed, which allows remote attackers to write to other sockets and have an unspecified impact via a failed SSL handshake, a different vulnerability than CVE-2011-5268. NOTE: some sources originally mapped this CVE to two different types of issues; this CVE has since been SPLIT, producing CVE-2011-5268.
EPSS 1.00% · 77.4th percentile
Risk Scores
CVSS 2.0
5.099999904632568
EPSS Score
1.00%
77.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| fedoraproject | fedora | 19, 20, 18 |
| n/a | n/a | n/a |
| duckcorp | bip | 0.8.0, 0.8.1, 0.8.2 |
Timeline
- Dec 24, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 17, 2022 CVE Updated
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
References
- FEDORA-2013-21060 vendor-advisory
- https://projects.duckcorp.org/issues/261 url
- https://projects.duckcorp.org/versions/13 url
- FEDORA-2013-21006 vendor-advisory
- FEDORA-2013-21018 vendor-advisory
- [oss-security] 20140102 Re: Duplicated CVE assignment for bip mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2013-4550 advisory