CVE-2012-2333

CVE-2012-2333 is an integer underflow vulnerability in OpenSSL versions prior to 0.9.8x, 1.0.0j, and 1.0.1c, specifically when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption. This flaw allows remote attackers to trigger a denial of service (buffer over-read) or potentially other unspecified impacts through a specially crafted TLS packet. The vulnerability has a CVSS score of 6.8, indicating a medium severity, and can be exploited remotely with medium attack complexity without authentication, leading to partial confidentiality, integrity, and availability impacts. Currently, there is no known public exploit code (Metasploit, Nuclei, ExploitDB) and no evidence of active exploitation, nor has it garnered significant community discussion or media coverage.