CVE-2011-5268 connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service (file descriptor consumption and crash) via multiple failed SSL handshakes,...
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service (file descriptor consumption and crash) via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 because it is a different type of issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bip(Debian:12) | < 0.8.9-1 | 0.8.9-1 |
| debian/bip(Debian:13) | < 0.8.9-1 | 0.8.9-1 |
| debian/bip(Debian:14) | < 0.8.9-1 | 0.8.9-1 |
| duckcorp bip | <= 0.8.8 | No fix listed |
| duckcorp bip | = 0.8.0 | No fix listed |
| duckcorp bip | = 0.8.0-rc0 | No fix listed |
| duckcorp bip | = 0.8.0-rc1 | No fix listed |
| duckcorp bip | = 0.8.1 | No fix listed |
| duckcorp bip | = 0.8.2 | No fix listed |
| duckcorp bip | = 0.8.3 | No fix listed |
| duckcorp bip | = 0.8.4 | No fix listed |
| duckcorp bip | = 0.8.5 | No fix listed |
| duckcorp bip | = 0.8.6 | No fix listed |
| duckcorp bip | = 0.8.7 | No fix listed |
| fedoraproject fedora | = 18 | No fix listed |
| fedoraproject fedora | = 19 | No fix listed |
| fedoraproject fedora | = 20 | No fix listed |
References
- Debian Security Tracker CVE-2011-5268 vendor-advisory
- FEDORA-2013-21006 vendor-advisory
- FEDORA-2013-21060 vendor-advisory
- FEDORA-2013-21018 vendor-advisory
- [oss-security] 20140102 Re: Duplicated CVE assignment for bip mailing-list
- projects.duckcorp.org patch
- projects.duckcorp.org