Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4576
HistoryJan 05, 2012 - 12:00 a.m.

CVE-2011-4576

2012-01-0500:00:00
ubuntu.com
ubuntu.com
250

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.009 Low

EPSS

Percentile

82.4%

The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f
does not properly initialize data structures for block cipher padding,
which might allow remote attackers to obtain sensitive information by
decrypting the padding data sent by an SSL peer.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenssl<ย 0.9.8g-4ubuntu3.15UNKNOWN
ubuntu10.04noarchopenssl<ย 0.9.8k-7ubuntu8.8UNKNOWN
ubuntu10.10noarchopenssl<ย 0.9.8o-1ubuntu4.6UNKNOWN
ubuntu11.04noarchopenssl<ย 0.9.8o-5ubuntu1.2UNKNOWN
ubuntu11.10noarchopenssl<ย 1.0.0e-2ubuntu4.2UNKNOWN
ubuntu11.10noarchopenssl098<ย 0.9.8o-7ubuntu1.2UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.009 Low

EPSS

Percentile

82.4%