CVE-2012-1558: yassl cyassl Resource Management Errors
Vulnerability summary
CVE-2012-1558 is a medium (CVSS 5.0) Resource Management Errors vulnerability in yassl cyassl. EPSS estimates a 1.35% chance of exploitation in the next 30 days, higher than 71.5% of scored vulnerabilities.
Not severe (CVSS 5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 12-03-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted X.509 certificate.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.35%
Chance of exploitation in the next 30 days
Percentile
72%
Versus all other CVEs
30-day change
Decrease -0.08 pp
From 1.43% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Yassl1 product
- cyassl≤ 2.0.6 | 0.2.0 | 0.3.0 | 0.4.0 | 0.5.0 | 0.5.5 | 0.6.0 | 0.6.2 | 0.6.3 | 0.8.0 | 0.9.0 | 0.9.6 | 0.9.8 | 0.9.9 | 1.0.0:rc1 | 1.0.0:rc2 | 1.0.0:rc3 | 1.0.2 | 1.0.3 | 1.0.6 | 1.1.0 | 1.2.0 | 1.3.0 | 1.4.0 | 1.5.0 | 1.5.4 | 1.5.6 | 1.6.0 | 1.6.5 | 1.8.0 | 1.9.0 | 2.0.0:rc1 | 2.0.0:rc2 | 2.0.0:rc3 | 2.0.2
1 vendor · 1 product
References
4 links- www.yassl.com/yaSSL/Docs-cyassl-changelog.htmlX Refsource CONFIRM