Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4109
HistoryJan 05, 2012 - 12:00 a.m.

CVE-2011-4109

2012-01-0500:00:00
ubuntu.com
ubuntu.com
11

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.038 Low

EPSS

Percentile

91.8%

Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when
X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an
unspecified impact by triggering failure of a policy check.

Notes

Author Note
mdeslaur 1.0.0 is not affected
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenssl<ย 0.9.8g-4ubuntu3.15UNKNOWN
ubuntu10.04noarchopenssl<ย 0.9.8k-7ubuntu8.8UNKNOWN
ubuntu10.10noarchopenssl<ย 0.9.8o-1ubuntu4.6UNKNOWN
ubuntu11.04noarchopenssl<ย 0.9.8o-5ubuntu1.2UNKNOWN
ubuntu11.10noarchopenssl098<ย 0.9.8o-7ubuntu1.2UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.038 Low

EPSS

Percentile

91.8%