Skip to content
Fencer Intel
high 7.5

CVE-2012-2110 in the critical feed json

The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not pr…

published 2012-04-19 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-2113

cvss
7.5
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
47.9%
EPSS 47.9% chance of exploitation in 30 days, percentile 98%
public exploits
1
Exploit-DB

Summary

The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.

Patch / fix

  • openssl Debian 14, Debian 13, Debian 12 1.0.1a-1

debian advisories DEBIAN-CVE-2012-2110

  • openssl RHEL 5 0.9.8e-22.el5_8.3
  • openssl RHEL 6 1.0.0-20.el6_2.4
  • openssl097a RHEL 5 0.9.7a-11.el5_8.2
  • openssl098e RHEL 6 0.9.8e-17.el6_2.2
  • openssl-perl RHEL 5 0.9.8e-22.el5_8.3
  • openssl-perl RHEL 6 1.0.0-20.el6_2.4
  • openssl RHEL 3 ELS 0.9.7a-33.28
  • openssl RHEL 4 ELS 0.9.7a-43.20.el4

red hat advisories RHSA-2012:0522RHSA-2012:0518

  • libqt4 SLES 12 SP1, SLES 12, SLED 12 SP1 +7 more 4.8.6-7.1
  • libqt4-sql-plugins SLES 12 SP1, SLES 12, SLED 12 SP1 +7 more 4.8.6-7.1

suse advisories SUSE-SU-403SUSE-SU-403 Forbidden-1

  • openssl-1_1 openSUSE Tumbleweed 1.1.1l-1.2

opensuse advisories openSUSE-SU-2024:11127-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2012-2110 updated cvss 7.5

openssl: asn1_d2i_read_bio integer errors leading to buffer overflow

  • Red Hat Enterprise Linux 4 openssl096b
    affected: no fix planned “Will not fix”
  • Red Hat JBoss Enterprise Web Server 1 openssl
    affected: no fix available
  • Red Hat Enterprise Linux (v. 5 server) openssl 0.9.8e-22.el5_8.3, openssl097a 0.9.7a-11.el5_8.2, openssl-perl 0.9.8e-22.el5_8.3
    fixed: vendor fix RHSA-2012:0518
  • Red Hat Enterprise Linux AS (v. 3 ELS) openssl 0.9.7a-33.28, openssl-perl 0.9.7a-33.28 Red Hat Enterprise Linux AS (v. 4 ELS) openssl 0.9.7a-43.20.el4, openssl-perl 0.9.7a-43.20.el4
    fixed: vendor fix RHSA-2012:0522
  • Red Hat Enterprise Linux Desktop (v. 5 client) openssl 0.9.8e-22.el5_8.3, openssl097a 0.9.7a-11.el5_8.2, openssl-perl 0.9.8e-22.el5_8.3 Red Hat Enterprise Linux Desktop (v. 6) openssl 1.0.0-20.el6_2.4, openssl098e 0.9.8e-17.el6_2.2 Red Hat Enterprise Linux Desktop Optional (v. 6) openssl 1.0.0-20.el6_2.4, openssl-perl 1.0.0-20.el6_2.4
    fixed: vendor fix RHSA-2012:0518
  • Red Hat Enterprise Linux ES (v. 3 ELS) openssl 0.9.7a-33.28, openssl-perl 0.9.7a-33.28 Red Hat Enterprise Linux ES (v. 4 ELS) openssl 0.9.7a-43.20.el4, openssl-perl 0.9.7a-43.20.el4 Red Hat Enterprise Linux EUS (v. 5.6 server) openssl 0.9.8e-12.el5_6.9, openssl-perl 0.9.8e-12.el5_6.9
    fixed: vendor fix RHSA-2012:0522
  • Red Hat Enterprise Linux HPC Node (v. 6) openssl 1.0.0-20.el6_2.4, openssl098e 0.9.8e-17.el6_2.2 Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl 1.0.0-20.el6_2.4, openssl-perl 1.0.0-20.el6_2.4
    fixed: vendor fix RHSA-2012:0518
  • Red Hat Enterprise Linux Long Life (v. 5.3 server) openssl 0.9.8e-7.el5_3.2, openssl-perl 0.9.8e-7.el5_3.2
    fixed: vendor fix RHSA-2012:0522
show 9 more
  • Red Hat Enterprise Linux Server (v. 6) openssl 1.0.0-20.el6_2.4, openssl098e 0.9.8e-17.el6_2.2
    fixed: vendor fix RHSA-2012:0518
  • Red Hat Enterprise Linux Server EUS (v. 6.0) openssl 1.0.0-4.el6_0.3 Red Hat Enterprise Linux Server EUS (v. 6.1) openssl 1.0.0-10.el6_1.6
    fixed: vendor fix RHSA-2012:0522
  • Red Hat Enterprise Linux Server Optional (v. 6) openssl 1.0.0-20.el6_2.4, openssl-perl 1.0.0-20.el6_2.4
    fixed: vendor fix RHSA-2012:0518
  • Red Hat Enterprise Linux Server Optional EUS (v. 6.0) openssl 1.0.0-4.el6_0.3, openssl-perl 1.0.0-4.el6_0.3 Red Hat Enterprise Linux Server Optional EUS (v. 6.1) openssl 1.0.0-10.el6_1.6, openssl-perl 1.0.0-10.el6_1.6
    fixed: vendor fix RHSA-2012:0522
  • Red Hat Enterprise Linux Workstation (v. 6) openssl 1.0.0-20.el6_2.4, openssl098e 0.9.8e-17.el6_2.2 Red Hat Enterprise Linux Workstation Optional (v. 6) openssl 1.0.0-20.el6_2.4, openssl-perl 1.0.0-20.el6_2.4
    fixed: vendor fix RHSA-2012:0518
  • Red Hat JBoss Enterprise Application Platform 5.1
    fixed: vendor fix RHSA-2012:1307
  • Red Hat JBoss Enterprise Application Platform 6.0
    fixed: vendor fix RHSA-2012:1308
  • Red Hat JBoss Web Server 1.0
    fixed: vendor fix RHSA-2012:1306
  • Red Hat RHEL Desktop Workstation (v. 5 client) openssl 0.9.8e-22.el5_8.3
    fixed: vendor fix RHSA-2012:0518

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. First public exploit (EDB-18756)
  2. Published

Exploit prediction

47.91% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • EDB-18756 OpenSSL - ASN1 BIO Memory Corruption dos, 2012-04-19
  • archives.neohapsis.com http://archives.neohapsis.com/archives/fulldisclosure/2012-04/0209.html referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Technology feeds

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.