{"action":"Upgrade openssl to 1.0.1e-1 or later.","affected":[{"fixed":"1.0.1e-1","introduced":"0"}],"component":"openssl","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.0.1e-1"],"id":"tcs_01M5NA1XE7H02YESP1FAQCXNJ2","modified_at":"2026-10-23T17:47:42.669951060Z","published_at":"2013-02-08T19:55:00.890Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2012-2686","https://security-tracker.debian.org/tracker/CVE-2012-2686"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2012-2686#Debian:14/openssl","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2012-2686"}],"summary":"crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application cra"}