Lucene search

K
opensslOpenSSLOPENSSL:CVE-2011-4108
HistoryJan 04, 2012 - 12:00 a.m.

Vulnerability in OpenSSL CVE-2011-4108

2012-01-0400:00:00
www.openssl.org
17

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

8.6

Confidence

High

EPSS

0.005

Percentile

76.1%

OpenSSL was susceptable an extension of the Vaudenay padding oracle attack on CBC mode encryption which enables an efficient plaintext recovery attack against the OpenSSL implementation of DTLS by exploiting timing differences arising during decryption processing.

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

8.6

Confidence

High

EPSS

0.005

Percentile

76.1%