CVE-2013-6449

Source
https://nvd.nist.gov/vuln/detail/CVE-2013-6449
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2013-6449.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2013-6449
Downstream
Related
Published
2013-12-23T22:55:03Z
Modified
2025-08-09T20:01:26Z
Summary
[none]
Details

The sslgetalgorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client.

References

Affected packages