1965372 - OpenSSL security vulnerability, ssl_get_algorithm2() Lets Remote Users Deny Service (CVE-2013-6449)

Symptom

CVE-2013-6449 indicates there is a vulnerability in a function call in OpenSSL, ssl_get_algorithm2() that can be used to formulate a Denial of Service attack (NULL pointer dereference and application crash)
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4353
http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=ca989269a2876bae79393bd54c3e72d49975fc75

Environment

SAP Business Intelligence Platform 4.0
SAP Crystal Server 2013

Product

SAP BusinessObjects Business Intelligence platform 4.0 ; SAP Crystal Server 2013

Keywords

ssl_get_algorithm2 ssl/s3_lib.c s3_lib.c s3_lib incorrect version TLS 1.2 , KBA , BI-BIP-DEP , Webapp Deployment, Networking, Vulnerabilities, Webservices , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.