Lucene search

[email protected]NVD:CVE-2011-0014

HistoryFeb 19, 2011 - 1:00 a.m.

CVE-2011-0014

2011-02-1901:00:01

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.9

Confidence

High

EPSS

0.103

Percentile

95.0%

JSON

ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka “OCSP stapling vulnerability.”

Affected configurations

Nvd

Node

opensslopensslMatch0.9.8h

opensslopensslMatch0.9.8i

opensslopensslMatch0.9.8j

opensslopensslMatch0.9.8k

opensslopensslMatch0.9.8l

opensslopensslMatch0.9.8m

opensslopensslMatch0.9.8n

opensslopensslMatch0.9.8o

opensslopensslMatch0.9.8p

opensslopensslMatch0.9.8q

Node

opensslopensslMatch1.0.0

opensslopensslMatch1.0.0beta1

opensslopensslMatch1.0.0beta2

opensslopensslMatch1.0.0beta3

opensslopensslMatch1.0.0beta4

opensslopensslMatch1.0.0beta5

opensslopensslMatch1.0.0a

opensslopensslMatch1.0.0b

opensslopensslMatch1.0.0c

VendorProductVersionCPE
opensslopenssl0.9.8hcpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*
opensslopenssl0.9.8icpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*
opensslopenssl0.9.8jcpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*
opensslopenssl0.9.8kcpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*
opensslopenssl0.9.8lcpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*
opensslopenssl0.9.8mcpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*
opensslopenssl0.9.8ncpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*
opensslopenssl0.9.8ocpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*
opensslopenssl0.9.8pcpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*
opensslopenssl0.9.8qcpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openssl	openssl	0.9.8h	cpe:2.3:a:openssl:openssl:0.9.8h:::::::*
openssl	openssl	0.9.8i	cpe:2.3:a:openssl:openssl:0.9.8i:::::::*
openssl	openssl	0.9.8j	cpe:2.3:a:openssl:openssl:0.9.8j:::::::*
openssl	openssl	0.9.8k	cpe:2.3:a:openssl:openssl:0.9.8k:::::::*
openssl	openssl	0.9.8l	cpe:2.3:a:openssl:openssl:0.9.8l:::::::*
openssl	openssl	0.9.8m	cpe:2.3:a:openssl:openssl:0.9.8m:::::::*
openssl	openssl	0.9.8n	cpe:2.3:a:openssl:openssl:0.9.8n:::::::*
openssl	openssl	0.9.8o	cpe:2.3:a:openssl:openssl:0.9.8o:::::::*
openssl	openssl	0.9.8p	cpe:2.3:a:openssl:openssl:0.9.8p:::::::*
openssl	openssl	0.9.8q	cpe:2.3:a:openssl:openssl:0.9.8q:::::::*