CVEvulnerability

CVE-2013-4550

5.1 MEDIUM Published 2013-12-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-12-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
CWE-310

Description

Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated with stderr before stderr has been closed, which allows remote attackers to write to other sockets and have an unspecified impact via a failed SSL handshake, a different vulnerability than CVE-2011-5268. NOTE: some sources originally mapped this CVE to two different types of issues; this CVE has since been SPLIT, producing CVE-2011-5268.

Affected configurations

• fedoraproject fedora 18 • fedoraproject fedora 19 • fedoraproject fedora 20 • duckcorp bip (<= 0.8.8) • duckcorp bip 0.8.0 • duckcorp bip 0.8.1 • duckcorp bip 0.8.2 • duckcorp bip 0.8.3 • duckcorp bip 0.8.4 • duckcorp bip 0.8.5 • duckcorp bip 0.8.6 • duckcorp bip 0.8.7

Related

Weakness · not in database (1)

References