Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-3210HistorySep 22, 2011 - 10:55 a.m.
CVE-2011-3210
2011-09-2210:55:00
Debian Security Bug Tracker
security-tracker.debian.org
10
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.305 Low
EPSS
Percentile
96.9%
The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.0e-1 | openssl_1.0.0e-1_all.deb |
| Debian | 11 | all | openssl | < 1.0.0e-1 | openssl_1.0.0e-1_all.deb |
| Debian | 10 | all | openssl | < 1.0.0e-1 | openssl_1.0.0e-1_all.deb |
| Debian | 999 | all | openssl | < 1.0.0e-1 | openssl_1.0.0e-1_all.deb |
| Debian | 13 | all | openssl | < 1.0.0e-1 | openssl_1.0.0e-1_all.deb |
Related
checkpoint_advisories
checkpoint_advisories
OpenSSL Handshake Sequence Cipher Suite Use-After-Free (CVE-2011-3210)
2012-05-14 00:00:00
OpenSSL Handshake Requests ECDH Use-After-Free (CVE-2011-3210)
2012-05-14 00:00:00
cve
cve
CVE-2011-3210
2011-09-22 10:55:00
openvas
openvas
OpenSSL: TLS Ephemeral ECDH Crashes (20110906) - Windows
2021-08-16 00:00:00
OpenSSL: TLS Ephemeral ECDH Crashes (20110906) - Linux
2021-08-16 00:00:00
FreeBSD Ports: openssl
2011-09-21 00:00:00
nessus
nessus
SuSE 11.1 Security Update : libopenssl (SAT Patch Number 5160)
2011-12-13 00:00:00
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 7760)
2011-12-13 00:00:00
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 7766)
2011-10-24 00:00:00
ubuntucve
ubuntucve
CVE-2011-3210
2011-09-22 00:00:00
prion
prion
Code injection
2011-09-22 10:55:00
openssl
openssl
Vulnerability in OpenSSL CVE-2011-3210
2011-09-06 00:00:00
f5
f5
K16834 : OpenSSL vulnerability CVE-2011-3210
2015-07-01 00:00:00
SOL16834 - OpenSSL vulnerability CVE-2011-3210
2015-07-01 00:00:00
securityvulns
securityvulns
OpenSSL security vulnerabilities
2011-10-16 00:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2011-09-06 00:00:00
debian
debian
[BSA-060] Security Update for openssl
2011-11-14 04:20:38
ibm
ibm
ubuntu
ubuntu
OpenSSL vulnerabilities
2012-02-09 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2011-10-09 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.305 Low
EPSS
Percentile
96.9%
Related for DEBIANCVE:CVE-2011-3210