Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4109
HistoryJan 05, 2012 - 12:00 a.m.

CVE-2011-4109

2012-01-0500:00:00
ubuntu.com
ubuntu.com
14

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.038

Percentile

91.9%

Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when
X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an
unspecified impact by triggering failure of a policy check.

Notes

Author Note
mdeslaur 1.0.0 is not affected
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenssl< 0.9.8g-4ubuntu3.15UNKNOWN
ubuntu10.04noarchopenssl< 0.9.8k-7ubuntu8.8UNKNOWN
ubuntu10.10noarchopenssl< 0.9.8o-1ubuntu4.6UNKNOWN
ubuntu11.04noarchopenssl< 0.9.8o-5ubuntu1.2UNKNOWN
ubuntu11.10noarchopenssl098< 0.9.8o-7ubuntu1.2UNKNOWN

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.038

Percentile

91.9%