CVE-2012-2333 [Medium] | Denial of Service in Openssl

CVE-2012-2333 is rated High Risk (66.4/100): CVSS Medium severity, with high exploitation likelihood (EPSS 28.15%, 98th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. EPSS rose +21.39% over the last day, indicating growing attacker interest. High exploitation likelihood—assess exposure and prioritize remediation.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2026-06-15	6.76%	28.15%	+21.39%
2	2026-03-04	1.24%	6.76%	+5.53%
3	2026-03-01	—	1.24%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2026-06-15

6.76%

28.15%

+21.39%

2026-03-04

1.24%

6.76%

+5.53%

2026-03-01

—

1.24%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
6.8	2.0	MEDIUM	`AV:N/AC:M/Au:N/C:P/I:P/A:P` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:M) Exploitation needs some favorable conditions, but not exceptional ones. Authentication (AU:N) No authentication is required. Confidentiality impact (C:P) Partial confidentiality impact. Integrity impact (I:P) Partial integrity impact. Availability impact (A:P) Partial availability impact.	8.6	6.4	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

6.8

2.0

MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:M): Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:P): Partial confidentiality impact.
Integrity impact (I:P): Partial integrity impact.
Availability impact (A:P): Partial availability impact.

8.6

6.4

[email protected]

OS Trackers for CVE-2012-2333

vendor	priority	summary	link
`debian`	not yet assigned	CVE-2012-2333 not yet assigned priority: Debian including 1 source packages (openssl), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5.	https://security-tracker.debian.org/tracker/CVE-2012-2333
`gentoo`	low	CVE-2012-2333: 1 GLSA(s) (201312-03), 1 atom(s) (dev-libs/openssl); latest impact low.	https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2012-2333
`redhat`	medium	—	https://access.redhat.com/security/cve/CVE-2012-2333
`ubuntu`	medium	CVE-2012-2333 medium priority: Ubuntu including 2 source packages (openssl, openssl098), 20 status rows across 10 suites (hardy, lucid, natty, oneiric, precise, quantal, raring, saucy, trusty, upstream): released 13, DNE 3, ignored 3, needs-triage 1.	https://ubuntu.com/security/CVE-2012-2333

Affected software / configurations for CVE-2012-2333

Vendor	Product	Version	Raw CPE
openssl	openssl	<= 0.9.8w	cpe:2.3:a:openssl:openssl::::::::
openssl	openssl	0.9.1c	cpe:2.3:a:openssl:openssl:0.9.1c:::::::*
openssl	openssl	0.9.2b	cpe:2.3:a:openssl:openssl:0.9.2b:::::::*
openssl	openssl	0.9.3	cpe:2.3:a:openssl:openssl:0.9.3:::::::*
openssl	openssl	0.9.3a	cpe:2.3:a:openssl:openssl:0.9.3a:::::::*
openssl	openssl	0.9.4	cpe:2.3:a:openssl:openssl:0.9.4:::::::*
openssl	openssl	0.9.5	cpe:2.3:a:openssl:openssl:0.9.5:::::::*
openssl	openssl	0.9.5	cpe:2.3:a:openssl:openssl:0.9.5:beta1::::::
openssl	openssl	0.9.5	cpe:2.3:a:openssl:openssl:0.9.5:beta2::::::
openssl	openssl	0.9.5a	cpe:2.3:a:openssl:openssl:0.9.5a:::::::*
openssl	openssl	0.9.5a	cpe:2.3:a:openssl:openssl:0.9.5a:beta1::::::
openssl	openssl	0.9.5a	cpe:2.3:a:openssl:openssl:0.9.5a:beta2::::::
openssl	openssl	0.9.6	cpe:2.3:a:openssl:openssl:0.9.6:::::::*
openssl	openssl	0.9.6	cpe:2.3:a:openssl:openssl:0.9.6:beta1::::::
openssl	openssl	0.9.6	cpe:2.3:a:openssl:openssl:0.9.6:beta2::::::
openssl	openssl	0.9.6	cpe:2.3:a:openssl:openssl:0.9.6:beta3::::::
openssl	openssl	0.9.6a	cpe:2.3:a:openssl:openssl:0.9.6a:::::::*
openssl	openssl	0.9.6a	cpe:2.3:a:openssl:openssl:0.9.6a:beta1::::::
openssl	openssl	0.9.6a	cpe:2.3:a:openssl:openssl:0.9.6a:beta2::::::
openssl	openssl	0.9.6a	cpe:2.3:a:openssl:openssl:0.9.6a:beta3::::::
openssl	openssl	0.9.6b	cpe:2.3:a:openssl:openssl:0.9.6b:::::::*
openssl	openssl	0.9.6c	cpe:2.3:a:openssl:openssl:0.9.6c:::::::*
openssl	openssl	0.9.6d	cpe:2.3:a:openssl:openssl:0.9.6d:::::::*
openssl	openssl	0.9.6e	cpe:2.3:a:openssl:openssl:0.9.6e:::::::*
openssl	openssl	0.9.6f	cpe:2.3:a:openssl:openssl:0.9.6f:::::::*
openssl	openssl	0.9.6g	cpe:2.3:a:openssl:openssl:0.9.6g:::::::*
openssl	openssl	0.9.6h	cpe:2.3:a:openssl:openssl:0.9.6h:::::::*
openssl	openssl	0.9.6i	cpe:2.3:a:openssl:openssl:0.9.6i:::::::*
openssl	openssl	0.9.6j	cpe:2.3:a:openssl:openssl:0.9.6j:::::::*
openssl	openssl	0.9.6k	cpe:2.3:a:openssl:openssl:0.9.6k:::::::*
openssl	openssl	0.9.6l	cpe:2.3:a:openssl:openssl:0.9.6l:::::::*
openssl	openssl	0.9.6m	cpe:2.3:a:openssl:openssl:0.9.6m:::::::*
openssl	openssl	0.9.7	cpe:2.3:a:openssl:openssl:0.9.7:::::::*
openssl	openssl	0.9.7	cpe:2.3:a:openssl:openssl:0.9.7:beta1::::::
openssl	openssl	0.9.7	cpe:2.3:a:openssl:openssl:0.9.7:beta2::::::
openssl	openssl	0.9.7	cpe:2.3:a:openssl:openssl:0.9.7:beta3::::::
openssl	openssl	0.9.7	cpe:2.3:a:openssl:openssl:0.9.7:beta4::::::
openssl	openssl	0.9.7	cpe:2.3:a:openssl:openssl:0.9.7:beta5::::::
openssl	openssl	0.9.7	cpe:2.3:a:openssl:openssl:0.9.7:beta6::::::
openssl	openssl	0.9.7a	cpe:2.3:a:openssl:openssl:0.9.7a:::::::*
openssl	openssl	0.9.7b	cpe:2.3:a:openssl:openssl:0.9.7b:::::::*
openssl	openssl	0.9.7c	cpe:2.3:a:openssl:openssl:0.9.7c:::::::*
openssl	openssl	0.9.7d	cpe:2.3:a:openssl:openssl:0.9.7d:::::::*
openssl	openssl	0.9.7e	cpe:2.3:a:openssl:openssl:0.9.7e:::::::*
openssl	openssl	0.9.7f	cpe:2.3:a:openssl:openssl:0.9.7f:::::::*
openssl	openssl	0.9.7g	cpe:2.3:a:openssl:openssl:0.9.7g:::::::*
openssl	openssl	0.9.7h	cpe:2.3:a:openssl:openssl:0.9.7h:::::::*
openssl	openssl	0.9.7i	cpe:2.3:a:openssl:openssl:0.9.7i:::::::*
openssl	openssl	0.9.7j	cpe:2.3:a:openssl:openssl:0.9.7j:::::::*
openssl	openssl	0.9.7k	cpe:2.3:a:openssl:openssl:0.9.7k:::::::*
openssl	openssl	0.9.7l	cpe:2.3:a:openssl:openssl:0.9.7l:::::::*
openssl	openssl	0.9.7m	cpe:2.3:a:openssl:openssl:0.9.7m:::::::*
openssl	openssl	0.9.8	cpe:2.3:a:openssl:openssl:0.9.8:::::::*
openssl	openssl	0.9.8a	cpe:2.3:a:openssl:openssl:0.9.8a:::::::*
openssl	openssl	0.9.8b	cpe:2.3:a:openssl:openssl:0.9.8b:::::::*
openssl	openssl	0.9.8c	cpe:2.3:a:openssl:openssl:0.9.8c:::::::*
openssl	openssl	0.9.8d	cpe:2.3:a:openssl:openssl:0.9.8d:::::::*
openssl	openssl	0.9.8e	cpe:2.3:a:openssl:openssl:0.9.8e:::::::*
openssl	openssl	0.9.8f	cpe:2.3:a:openssl:openssl:0.9.8f:::::::*
openssl	openssl	0.9.8g	cpe:2.3:a:openssl:openssl:0.9.8g:::::::*
openssl	openssl	0.9.8h	cpe:2.3:a:openssl:openssl:0.9.8h:::::::*
openssl	openssl	0.9.8i	cpe:2.3:a:openssl:openssl:0.9.8i:::::::*
openssl	openssl	0.9.8j	cpe:2.3:a:openssl:openssl:0.9.8j:::::::*
openssl	openssl	0.9.8k	cpe:2.3:a:openssl:openssl:0.9.8k:::::::*
openssl	openssl	0.9.8l	cpe:2.3:a:openssl:openssl:0.9.8l:::::::*
openssl	openssl	0.9.8m	cpe:2.3:a:openssl:openssl:0.9.8m:::::::*
openssl	openssl	0.9.8m	cpe:2.3:a:openssl:openssl:0.9.8m:beta1::::::
openssl	openssl	0.9.8n	cpe:2.3:a:openssl:openssl:0.9.8n:::::::*
openssl	openssl	0.9.8o	cpe:2.3:a:openssl:openssl:0.9.8o:::::::*
openssl	openssl	0.9.8p	cpe:2.3:a:openssl:openssl:0.9.8p:::::::*
openssl	openssl	0.9.8q	cpe:2.3:a:openssl:openssl:0.9.8q:::::::*
openssl	openssl	0.9.8r	cpe:2.3:a:openssl:openssl:0.9.8r:::::::*
openssl	openssl	0.9.8s	cpe:2.3:a:openssl:openssl:0.9.8s:::::::*
openssl	openssl	0.9.8t	cpe:2.3:a:openssl:openssl:0.9.8t:::::::*
openssl	openssl	0.9.8u	cpe:2.3:a:openssl:openssl:0.9.8u:::::::*
openssl	openssl	0.9.8v	cpe:2.3:a:openssl:openssl:0.9.8v:::::::*
redhat	openssl	0.9.6-15	cpe:2.3:a:redhat:openssl:0.9.6-15:::::::*
redhat	openssl	0.9.6b-3	cpe:2.3:a:redhat:openssl:0.9.6b-3:::::::*
redhat	openssl	0.9.7a-2	cpe:2.3:a:redhat:openssl:0.9.7a-2:::::::*
openssl	openssl	1.0.0	cpe:2.3:a:openssl:openssl:1.0.0:::::::*

References for CVE-2012-2333

URL	Tags
http://cvs.openssl.org/chngview?cn=22538
http://cvs.openssl.org/chngview?cn=22547
http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081460.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00019.html
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00020.html
http://marc.info/?l=bugtraq&m=134919053717161&w=2
http://marc.info/?l=bugtraq&m=136432043316835&w=2
http://rhn.redhat.com/errata/RHSA-2012-0699.html
http://rhn.redhat.com/errata/RHSA-2012-1306.html
http://rhn.redhat.com/errata/RHSA-2012-1307.html
http://rhn.redhat.com/errata/RHSA-2012-1308.html
http://secunia.com/advisories/49116
http://secunia.com/advisories/49208
http://secunia.com/advisories/49324
http://secunia.com/advisories/50768
http://secunia.com/advisories/51312
http://support.apple.com/kb/HT5784
http://www.cert.fi/en/reports/2012/vulnerability641549.html
http://www.debian.org/security/2012/dsa-2475
http://www.kb.cert.org/vuls/id/737740	US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2012:073
http://www.openssl.org/news/secadv_20120510.txt
http://www.securityfocus.com/bid/53476
http://www.securitytracker.com/id?1027057
https://bugzilla.redhat.com/show_bug.cgi?id=820686
https://exchange.xforce.ibmcloud.com/vulnerabilities/75525

URL

CVE-2012-2333

Exploit prediction scoring system (EPSS) score for CVE-2012-2333

Common vulnerability scoring system (CVSS) metrics for CVE-2012-2333

Weakness enumeration for CVE-2012-2333

OS Trackers for CVE-2012-2333

Affected software / configurations for CVE-2012-2333

References for CVE-2012-2333