{"vulnerability": "cve-2012-2686", "sightings": [{"uuid": "d1fe13e4-3cd6-42e0-a1ca-9e95a25c6063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2686", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "de3e1794-18f7-40a0-b07f-947cad89bdd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2686", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:05.000000Z"}, {"uuid": "efbc42f4-f15f-4506-9991-619a0145b494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2686", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/ssl/openssl_aesni.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "6bc988eb-3936-47b5-a97c-0cb9fa51531b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2686", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/ssl/openssl_aesni.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Wolfgang Ettlinger \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"The AES-NI implementation of OpenSSL 1.0.1c does not properly compute the\\n          length of an encrypted message when used with a TLS version 1.1 or above. This\\n          leads to an integer underflow which can cause a DoS. The vulnerable function\\n          aesni_cbc_hmac_sha1_cipher is only included in the 64-bit versions of OpenSSL.\\n          This module has been tested successfully on Ubuntu 12.04 (64-bit) with the default\\n          OpenSSL 1.0.1c package.\", \"disclosure_date\": \"2013-02-05\", \"fullname\": \"auxiliary/dos/ssl/openssl_aesni\", \"is_install_path\": true, \"mod_time\": \"2025-05-15 08:43:24 +0000\", \"name\": \"OpenSSL TLS 1.1 and 1.2 AES-NI DoS\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/auxiliary/dos/ssl/openssl_aesni.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"dos/ssl/openssl_aesni\", \"references\": [\"CVE-2012-2686\", \"URL-https://www.openssl.org/news/secadv/20130205.txt\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:04.257428Z"}]}