DEBIAN-CVE-2013-0166

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2013-0166
Downstream
DSA-2621-1
Published: 08 Feb 2013, 19:55
Last modified:28 Apr 2026, 20:12

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

08 Feb 2013, 19:55
Published
Vulnerability first disclosed
28 Apr 2026, 20:12
Last Modified
Vulnerability information updated

Description

OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.

Affected Systems

  • debian•openssl

    < 1.0.1e-1 | < 1.0.1e-1 | < 1.0.1e-1 | < 1.0.1e-1

References (1)