Lucene search
Ubuntu.comUB:CVE-2011-3207HistorySep 22, 2011 - 12:00 a.m.
CVE-2011-3207
2011-09-2200:00:00
ubuntu.com
ubuntu.com
12
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.013 Low
EPSS
Percentile
85.8%
crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize
certain structure members, which makes it easier for remote attackers to
bypass CRL validation by using a nextUpdate value corresponding to a time
in the past.
Notes
| Author | Note |
|---|---|
| jdstrand | from upstream, 1.0.0 only |
Related
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0e-alt1
2011-09-12 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 1.0.0e-alt1
2011-09-12 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.0e-alt1
2011-09-12 00:00:00
veracode
veracode
CRL Validation Bypass
2020-04-10 01:07:24
f5
f5
K15318 : OpenSSL vulnerability CVE-2011-3207
2014-06-05 00:00:00
SOL15318 - OpenSSL vulnerability CVE-2011-3207
2014-06-05 00:00:00
nessus
nessus
Fedora 16 : openssl-1.0.0e-1.fc16 (2011-12233)
2011-09-12 00:00:00
Amazon Linux AMI : openssl (ALAS-2011-4)
2014-10-12 00:00:00
Oracle Linux 6 : openssl (ELSA-2011-1409)
2013-07-12 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2011-1409)
2015-10-06 00:00:00
OpenSSL: CRL Verification Vulnerability (20110906) - Linux
2021-08-16 00:00:00
Amazon Linux: Security Advisory (ALAS-2011-4)
2015-09-08 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: openssl-1.0.0e-1.fc16
2011-09-11 01:45:41
[SECURITY] Fedora 15 Update: openssl-1.0.0g-1.fc15
2012-01-24 07:55:34
[SECURITY] Fedora 14 Update: openssl-1.0.0e-1.fc14
2011-09-10 23:55:13
debiancve
debiancve
CVE-2011-3207
2011-09-22 10:55:00
amazon
amazon
Medium: openssl
2011-10-10 23:40:00
prion
prion
Design/Logic Flaw
2011-09-22 10:55:00
cve
cve
CVE-2011-3207
2011-09-22 10:55:00
openssl
openssl
Vulnerability in OpenSSL CVE-2011-3207
2011-09-06 00:00:00
oraclelinux
oraclelinux
openssl security update
2011-10-26 00:00:00
openssl-fips security update
2015-04-02 00:00:00
openssl security update
2016-09-27 00:00:00
redhat
redhat
(RHSA-2011:1409) Moderate: openssl security update
2011-10-26 00:00:00
securityvulns
securityvulns
OpenSSL security vulnerabilities
2011-10-16 00:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2011-09-06 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2011-10-09 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.013 Low
EPSS
Percentile
85.8%
Related for UB:CVE-2011-3207