NVD Vulnerability Detail

CVE-2012-2333

Summary	Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
Publication Date	May 15, 2012, 7:55 a.m.
Registration Date	Jan. 28, 2021, 2:57 p.m.
Last Update	Nov. 21, 2024, 10:38 a.m.

CVSS2.0 : MEDIUM
Score	6.8
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:0.9.7:beta5::::::
cpe:2.3:a:openssl:openssl:0.9.7:beta3::::::
cpe:2.3:a:openssl:openssl:0.9.5a:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.7:beta6::::::
cpe:2.3:a:openssl:openssl:0.9.8b:::::::*
cpe:2.3:a:openssl:openssl:0.9.7l:::::::*
cpe:2.3:a:openssl:openssl:0.9.6i:::::::*
cpe:2.3:a:openssl:openssl:0.9.8m:::::::*
cpe:2.3:a:openssl:openssl:0.9.3:::::::*
cpe:2.3:a:openssl:openssl:0.9.8c:::::::*
cpe:2.3:a:openssl:openssl:0.9.7:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.7c:::::::*
cpe:2.3:a:openssl:openssl:0.9.5:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.8n:::::::*
cpe:2.3:a:openssl:openssl:0.9.8p:::::::*
cpe:2.3:a:openssl:openssl:0.9.6d:::::::*
cpe:2.3:a:openssl:openssl:0.9.1c:::::::*
cpe:2.3:a:openssl:openssl:0.9.6:::::::*
cpe:2.3:a:openssl:openssl:0.9.7j:::::::*
cpe:2.3:a:openssl:openssl:0.9.6a:::::::*
cpe:2.3:a:openssl:openssl:0.9.8e:::::::*
cpe:2.3:a:openssl:openssl:0.9.8u:::::::*
cpe:2.3:a:redhat:openssl:0.9.6-15:::::::*
cpe:2.3:a:openssl:openssl:0.9.4:::::::*
cpe:2.3:a:openssl:openssl:0.9.8g:::::::*
cpe:2.3:a:openssl:openssl:0.9.6a:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.8k:::::::*
cpe:2.3:a:openssl:openssl:0.9.8m:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.8d:::::::*
cpe:2.3:a:openssl:openssl:0.9.5a:::::::*
cpe:2.3:a:openssl:openssl:0.9.6f:::::::*
cpe:2.3:a:openssl:openssl:0.9.8j:::::::*
cpe:2.3:a:openssl:openssl:0.9.6:beta3::::::
cpe:2.3:a:openssl:openssl:0.9.6l:::::::*
cpe:2.3:a:openssl:openssl:0.9.7k:::::::*
cpe:2.3:a:openssl:openssl:0.9.8s:::::::*
cpe:2.3:a:openssl:openssl:0.9.7g:::::::*
cpe:2.3:a:openssl:openssl:0.9.6e:::::::*
cpe:2.3:a:openssl:openssl:0.9.7d:::::::*
cpe:2.3:a:openssl:openssl:0.9.8l:::::::*
cpe:2.3:a:openssl:openssl:0.9.7:::::::*
cpe:2.3:a:openssl:openssl:0.9.6b:::::::*
cpe:2.3:a:openssl:openssl:0.9.7e:::::::*
cpe:2.3:a:openssl:openssl:0.9.7b:::::::*
cpe:2.3:a:openssl:openssl:0.9.8r:::::::*
cpe:2.3:a:openssl:openssl:0.9.8t:::::::*
cpe:2.3:a:openssl:openssl:0.9.6a:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.6k:::::::*
cpe:2.3:a:openssl:openssl:0.9.8a:::::::*
cpe:2.3:a:openssl:openssl:0.9.6g:::::::*
cpe:2.3:a:openssl:openssl:0.9.6:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.7m:::::::*
cpe:2.3:a:openssl:openssl:0.9.7:beta4::::::
cpe:2.3:a:openssl:openssl::::::::		0.9.8w
cpe:2.3:a:openssl:openssl:0.9.3a:::::::*
cpe:2.3:a:openssl:openssl:0.9.6h:::::::*
cpe:2.3:a:openssl:openssl:0.9.7:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.7i:::::::*
cpe:2.3:a:openssl:openssl:0.9.7h:::::::*
cpe:2.3:a:openssl:openssl:0.9.8o:::::::*
cpe:2.3:a:openssl:openssl:0.9.8q:::::::*
cpe:2.3:a:redhat:openssl:0.9.6b-3:::::::*
cpe:2.3:a:openssl:openssl:0.9.6j:::::::*
cpe:2.3:a:openssl:openssl:0.9.8:::::::*
cpe:2.3:a:openssl:openssl:0.9.7a:::::::*
cpe:2.3:a:openssl:openssl:0.9.6c:::::::*
cpe:2.3:a:openssl:openssl:0.9.6:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.6m:::::::*
cpe:2.3:a:openssl:openssl:0.9.8v:::::::*
cpe:2.3:a:openssl:openssl:0.9.8i:::::::*
cpe:2.3:a:openssl:openssl:0.9.8f:::::::*
cpe:2.3:a:openssl:openssl:0.9.5:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.8h:::::::*
cpe:2.3:a:openssl:openssl:0.9.2b:::::::*
cpe:2.3:a:openssl:openssl:0.9.5:::::::*
cpe:2.3:a:openssl:openssl:0.9.5a:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.6a:beta3::::::
cpe:2.3:a:redhat:openssl:0.9.7a-2:::::::*
cpe:2.3:a:openssl:openssl:0.9.7f:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.0c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.0:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.0h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0e:::::::*
cpe:2.3:a:openssl:openssl:1.0.0f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta4::::::
cpe:2.3:a:openssl:openssl:1.0.0:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta5::::::
cpe:2.3:a:openssl:openssl:1.0.0a:::::::*
cpe:2.3:a:openssl:openssl:1.0.0b:::::::*
cpe:2.3:a:openssl:openssl:1.0.0g:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.1:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.1:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:::::::*

Related information, measures and tools

No	URL	タグ
1	http://cvs.openssl.org/chngview?cn=22538
2	http://cvs.openssl.org/chngview?cn=22538
3	http://cvs.openssl.org/chngview?cn=22547
4	http://cvs.openssl.org/chngview?cn=22547
5	http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
6	http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
7	http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081460.html
8	http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081460.html
9	http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html
10	http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html
11	http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00019.html
12	http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00019.html
13	http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00020.html
14	http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00020.html
15	http://marc.info/?l=bugtraq&m=134919053717161&w=2
16	http://marc.info/?l=bugtraq&m=134919053717161&w=2
17	http://marc.info/?l=bugtraq&m=134919053717161&w=2
18	http://marc.info/?l=bugtraq&m=134919053717161&w=2
19	http://marc.info/?l=bugtraq&m=136432043316835&w=2
20	http://marc.info/?l=bugtraq&m=136432043316835&w=2
21	http://marc.info/?l=bugtraq&m=136432043316835&w=2
22	http://marc.info/?l=bugtraq&m=136432043316835&w=2
23	http://rhn.redhat.com/errata/RHSA-2012-0699.html
24	http://rhn.redhat.com/errata/RHSA-2012-0699.html
25	http://rhn.redhat.com/errata/RHSA-2012-1306.html
26	http://rhn.redhat.com/errata/RHSA-2012-1306.html
27	http://rhn.redhat.com/errata/RHSA-2012-1307.html
28	http://rhn.redhat.com/errata/RHSA-2012-1307.html
29	http://rhn.redhat.com/errata/RHSA-2012-1308.html
30	http://rhn.redhat.com/errata/RHSA-2012-1308.html
31	http://secunia.com/advisories/49116
32	http://secunia.com/advisories/49116
33	http://secunia.com/advisories/49208
34	http://secunia.com/advisories/49208
35	http://secunia.com/advisories/49324
36	http://secunia.com/advisories/49324
37	http://secunia.com/advisories/50768
38	http://secunia.com/advisories/50768
39	http://secunia.com/advisories/51312
40	http://secunia.com/advisories/51312
41	http://support.apple.com/kb/HT5784
42	http://support.apple.com/kb/HT5784
43	http://www.cert.fi/en/reports/2012/vulnerability641549.html
44	http://www.cert.fi/en/reports/2012/vulnerability641549.html
45	http://www.debian.org/security/2012/dsa-2475
46	http://www.debian.org/security/2012/dsa-2475
47	http://www.kb.cert.org/vuls/id/737740	US Government Resource
48	http://www.kb.cert.org/vuls/id/737740	US Government Resource
49	http://www.mandriva.com/security/advisories?name=MDVSA-2012:073
50	http://www.mandriva.com/security/advisories?name=MDVSA-2012:073
51	http://www.openssl.org/news/secadv_20120510.txt
52	http://www.openssl.org/news/secadv_20120510.txt
53	http://www.securityfocus.com/bid/53476
54	http://www.securityfocus.com/bid/53476
55	http://www.securitytracker.com/id?1027057
56	http://www.securitytracker.com/id?1027057
57	https://bugzilla.redhat.com/show_bug.cgi?id=820686
58	https://bugzilla.redhat.com/show_bug.cgi?id=820686
59	https://exchange.xforce.ibmcloud.com/vulnerabilities/75525
60	https://exchange.xforce.ibmcloud.com/vulnerabilities/75525

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-189	数値処理の問題	https://cwe.mitre.org/data/definitions/189.html

JVN Vulnerability Information

OpenSSL における整数アンダーフローの脆弱性

Title	OpenSSL における整数アンダーフローの脆弱性
Summary	OpenSSL には、TLS または DTLS が CBC 暗号化で使用される場合、整数アンダーフローの脆弱性が存在します。
Possible impacts	第三者により、特定の不適切な IV 計算中に、巧妙に細工された TLS パケットを介して、サービス運用妨害 (バッファオーバーリード) 状態にされる、またはその他の詳細不明な影響を受ける可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	May 10, 2012, midnight
Registration Date	May 16, 2012, 3:18 p.m.
Last Update	June 26, 2014, 2:02 p.m.

Affected System

OpenSSL Project

OpenSSL 0.9.8x 未満

OpenSSL 1.0.0j 未満の 1.0.0

OpenSSL 1.0.1c 未満の 1.0.1

アップル

Apple Mac OS X 10.6.8

Apple Mac OS X v10.7 から v10.7.5

Apple Mac OS X v10.8 から v10.8.3

Apple Mac OS X Server 10.6.8

Apple Mac OS X Server v10.7 から v10.7.5

日本電気

WebOTX R4.x/R5.x/R6.x/V7.1に含まれるWebサーバ 1.3

WebOTX R6.x/V7.1/V8.xに含まれるWebサーバ 2.0

WebOTX V8.2/V8.3/V8.4に含まれるWebサーバ 2.2

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-2333	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2333
National Vulnerability Database (NVD)
2	CVE-2012-2333	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2333
SECURITY BLOG
3	CVE-2012-2333 Denial of Service (DoS) vulnerability in OpenSSL	http://blogs.oracle.com/sunsecurity/entry/cve_2012_2333_denial_of

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-189	https://jvndb.jvn.jp/ja/cwe/CWE-189.html

ベンダー情報

No	Name	URL
Apple Mailing Lists
1	APPLE-SA-2013-06-04-1	http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
Apple Security Updates
2	HT5784	http://support.apple.com/kb/HT5784
Apple セキュリティアップデート
3	HT5784	http://support.apple.com/kb/HT5784?viewlocale=ja_JP
Debian セキュリティ勧告
4	DSA-2475	http://www.debian.org/security/2012/dsa-2475
Fedora Update Notification
5	FEDORA-2012-18035	http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html
6	FEDORA-2012-7939	http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081460.html
HP Security Bulletin
7	HPSBUX02814 SSRT100930	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c03498127
NEC製品セキュリティ情報
8	NV13-002	http://jpn.nec.com/security-info/secinfo/nv13-002.html
OpenSSL
9	openssl - Check-in [22538]	http://cvs.openssl.org/chngview?cn=22538
10	openssl - Check-in [22547]	http://cvs.openssl.org/chngview?cn=22547
OpenSSL Security Advisory
11	Invalid TLS/DTLS record attack (CVE-2012-2333)	http://www.openssl.org/news/secadv_20120510.txt
Red Hat Bugzilla
12	Bug 820686	https://bugzilla.redhat.com/show_bug.cgi?id=820686
Red Hat Security Advisory
13	RHSA-2012:1306	http://rhn.redhat.com/errata/RHSA-2012-1306.html
14	RHSA-2012:1307	http://rhn.redhat.com/errata/RHSA-2012-1307.html
15	RHSA-2012:1308	http://rhn.redhat.com/errata/RHSA-2012-1308.html
Turbolinux Security Advisory
16	TLSA-2014-1	http://www.turbolinux.co.jp/security/2014/TLSA-2014-1j.html

その他

No	Name	URL
CERT-FI
1	FICORA #641549	http://www.cert.fi/en/reports/2012/vulnerability641549.html
JVN
2	JVNVU#91284469	http://jvn.jp/cert/JVNVU91284469/
3	JVNVU#92046435	http://jvn.jp/cert/JVNVU92046435/index.html

Change Log

No	Changed Details	Date of change
0	[2012年05月16日] 掲載 [2012年06月27日] ベンダ情報：Debian (DSA-2475) を追加ベンダ情報：レッドハット (Bug 820686) を追加 [2012年07月23日] ベンダ情報：オラクル (CVE-2012-2333 Denial of Service (DoS) vulnerability in OpenSSL) を追加 [2012年09月04日] ベンダ情報：Fedora Project (FEDORA-2012-7939) を追加 [2012年11月08日] ベンダ情報：レッドハット (RHSA-2012:1306) を追加ベンダ情報：レッドハット (RHSA-2012:1307) を追加ベンダ情報：レッドハット (RHSA-2012:1308) を追加 [2012年11月16日] ベンダ情報：ヒューレット・パッカード (HPSBUX02814 SSRT100930) を追加 [2013年02月04日] 影響を受けるシステム：日本電気 (NV13-002) の情報を追加ベンダ情報：日本電気 (NV13-002) の情報を追加 [2013年06月07日] 影響を受けるシステム：アップル (HT5784) の情報を追加ベンダ情報：アップル (HT5784) を追加ベンダ情報：アップル (APPLE-SA-2013-06-04-1) を追加 [2013年08月27日] ベンダ情報：Fedora Project (FEDORA-2012-18035) を追加 [2014年06月26日] ベンダ情報：ターボリナックス (TLSA-2014-1) を追加	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:0.9.7:beta5::::::
cpe:2.3:a:openssl:openssl:0.9.7:beta3::::::
cpe:2.3:a:openssl:openssl:0.9.5a:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.7:beta6::::::
cpe:2.3:a:openssl:openssl:0.9.8b:::::::*
cpe:2.3:a:openssl:openssl:0.9.7l:::::::*
cpe:2.3:a:openssl:openssl:0.9.6i:::::::*
cpe:2.3:a:openssl:openssl:0.9.8m:::::::*
cpe:2.3:a:openssl:openssl:0.9.3:::::::*
cpe:2.3:a:openssl:openssl:0.9.8c:::::::*
cpe:2.3:a:openssl:openssl:0.9.7:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.7c:::::::*
cpe:2.3:a:openssl:openssl:0.9.5:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.8n:::::::*
cpe:2.3:a:openssl:openssl:0.9.8p:::::::*
cpe:2.3:a:openssl:openssl:0.9.6d:::::::*
cpe:2.3:a:openssl:openssl:0.9.1c:::::::*
cpe:2.3:a:openssl:openssl:0.9.6:::::::*
cpe:2.3:a:openssl:openssl:0.9.7j:::::::*
cpe:2.3:a:openssl:openssl:0.9.6a:::::::*
cpe:2.3:a:openssl:openssl:0.9.8e:::::::*
cpe:2.3:a:openssl:openssl:0.9.8u:::::::*
cpe:2.3:a:redhat:openssl:0.9.6-15:::::::*
cpe:2.3:a:openssl:openssl:0.9.4:::::::*
cpe:2.3:a:openssl:openssl:0.9.8g:::::::*
cpe:2.3:a:openssl:openssl:0.9.6a:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.8k:::::::*
cpe:2.3:a:openssl:openssl:0.9.8m:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.8d:::::::*
cpe:2.3:a:openssl:openssl:0.9.5a:::::::*
cpe:2.3:a:openssl:openssl:0.9.6f:::::::*
cpe:2.3:a:openssl:openssl:0.9.8j:::::::*
cpe:2.3:a:openssl:openssl:0.9.6:beta3::::::
cpe:2.3:a:openssl:openssl:0.9.6l:::::::*
cpe:2.3:a:openssl:openssl:0.9.7k:::::::*
cpe:2.3:a:openssl:openssl:0.9.8s:::::::*
cpe:2.3:a:openssl:openssl:0.9.7g:::::::*
cpe:2.3:a:openssl:openssl:0.9.6e:::::::*
cpe:2.3:a:openssl:openssl:0.9.7d:::::::*
cpe:2.3:a:openssl:openssl:0.9.8l:::::::*
cpe:2.3:a:openssl:openssl:0.9.7:::::::*
cpe:2.3:a:openssl:openssl:0.9.6b:::::::*
cpe:2.3:a:openssl:openssl:0.9.7e:::::::*
cpe:2.3:a:openssl:openssl:0.9.7b:::::::*
cpe:2.3:a:openssl:openssl:0.9.8r:::::::*
cpe:2.3:a:openssl:openssl:0.9.8t:::::::*
cpe:2.3:a:openssl:openssl:0.9.6a:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.6k:::::::*
cpe:2.3:a:openssl:openssl:0.9.8a:::::::*
cpe:2.3:a:openssl:openssl:0.9.6g:::::::*
cpe:2.3:a:openssl:openssl:0.9.6:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.7m:::::::*
cpe:2.3:a:openssl:openssl:0.9.7:beta4::::::
cpe:2.3:a:openssl:openssl::::::::		0.9.8w
cpe:2.3:a:openssl:openssl:0.9.3a:::::::*
cpe:2.3:a:openssl:openssl:0.9.6h:::::::*
cpe:2.3:a:openssl:openssl:0.9.7:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.7i:::::::*
cpe:2.3:a:openssl:openssl:0.9.7h:::::::*
cpe:2.3:a:openssl:openssl:0.9.8o:::::::*
cpe:2.3:a:openssl:openssl:0.9.8q:::::::*
cpe:2.3:a:redhat:openssl:0.9.6b-3:::::::*
cpe:2.3:a:openssl:openssl:0.9.6j:::::::*
cpe:2.3:a:openssl:openssl:0.9.8:::::::*
cpe:2.3:a:openssl:openssl:0.9.7a:::::::*
cpe:2.3:a:openssl:openssl:0.9.6c:::::::*
cpe:2.3:a:openssl:openssl:0.9.6:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.6m:::::::*
cpe:2.3:a:openssl:openssl:0.9.8v:::::::*
cpe:2.3:a:openssl:openssl:0.9.8i:::::::*
cpe:2.3:a:openssl:openssl:0.9.8f:::::::*
cpe:2.3:a:openssl:openssl:0.9.5:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.8h:::::::*
cpe:2.3:a:openssl:openssl:0.9.2b:::::::*
cpe:2.3:a:openssl:openssl:0.9.5:::::::*
cpe:2.3:a:openssl:openssl:0.9.5a:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.6a:beta3::::::
cpe:2.3:a:redhat:openssl:0.9.7a-2:::::::*
cpe:2.3:a:openssl:openssl:0.9.7f:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.0c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.0:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.0h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0e:::::::*
cpe:2.3:a:openssl:openssl:1.0.0f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta4::::::
cpe:2.3:a:openssl:openssl:1.0.0:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta5::::::
cpe:2.3:a:openssl:openssl:1.0.0a:::::::*
cpe:2.3:a:openssl:openssl:1.0.0b:::::::*
cpe:2.3:a:openssl:openssl:1.0.0g:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.1:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.1:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:::::::*