CVE-2013-6449

MEDIUM · CVSS 4.3 EPSS 21.17%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-12-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2013-6449

Severity

MEDIUM

CVSS

4.3

EPSS

21.17%

OpenSSL

Original NVD Description

The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client.