Lucene search

K
opensslOpenSSLOPENSSL:CVE-2011-4108
HistoryJan 04, 2012 - 12:00 a.m.

Vulnerability in OpenSSL CVE-2011-4108

2012-01-0400:00:00
www.openssl.org
16

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

8.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.2%

OpenSSL was susceptable an extension of the Vaudenay padding oracle attack on CBC mode encryption which enables an efficient plaintext recovery attack against the OpenSSL implementation of DTLS by exploiting timing differences arising during decryption processing.

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

8.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.2%