RHSA-2012:1306 | Vulnetix

RHSA-2012:1306 PUBLISHED CVSS 4.300000190734863 MEDIUM

The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.

Risk Scores

CVSS 2.0

4.300000190734863

Affected Products

Vendor	Product	Versions
Red Hat	Red Hat JBoss Web Server 1.0

Timeline

Sep 24, 2012 CVE Published
Apr 29, 2026 Security Advisory
Apr 29, 2026 Security Advisory
Apr 29, 2026 Security Advisory
Apr 29, 2026 Security Advisory
May 14, 2026 CVE Updated
May 15, 2026 Distribution Patch
May 15, 2026 Distribution Patch
May 15, 2026 Security Advisory
May 15, 2026 Security Advisory
May 15, 2026 Security Advisory
May 15, 2026 Security Advisory

References

https://bugzilla.redhat.com/show_bug.cgi?id=771770 issue
https://bugzilla.redhat.com/show_bug.cgi?id=771771 issue
https://bugzilla.redhat.com/show_bug.cgi?id=771775 issue
https://bugzilla.redhat.com/show_bug.cgi?id=802489 issue
https://bugzilla.redhat.com/show_bug.cgi?id=802725 issue
https://bugzilla.redhat.com/show_bug.cgi?id=820686 issue
https://nvd.nist.gov/vuln/detail/CVE-2011-4108 advisory
https://access.redhat.com/security/cve/CVE-2011-4576 advisory
https://www.cve.org/CVERecord?id=CVE-2011-4576 advisory
https://access.redhat.com/security/cve/CVE-2011-4619 advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-4619 advisory
https://www.cve.org/CVERecord?id=CVE-2012-0884 advisory
http://www.openssl.org/news/secadv_20120312.txt advisory
https://access.redhat.com/security/cve/CVE-2012-1165 advisory
https://www.cve.org/CVERecord?id=CVE-2012-1165 advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-2110 advisory
https://www.cve.org/CVERecord?id=CVE-2012-2333 advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-2333 advisory
https://access.redhat.com/errata/RHSA-2012:1306 advisory
https://access.redhat.com/security/updates/classification/#important advisory

…and 19 more

Open in Interactive Console →