Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-3210
HistorySep 22, 2011 - 10:55 a.m.

CVE-2011-3210

2011-09-2210:55:03
CWE-399
[email protected]
web.nvd.nist.gov
158
cve-2011-3210
openssl
ecdh
tls protocol
denial of service
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.7 High

AI Score

Confidence

High

0.305 Low

EPSS

Percentile

97.0%

JSON

The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.

Affected configurations

NVD
Node
opensslopensslMatch0.9.8
OR
opensslopensslMatch0.9.8a
OR
opensslopensslMatch0.9.8b
OR
opensslopensslMatch0.9.8c
OR
opensslopensslMatch0.9.8d
OR
opensslopensslMatch0.9.8e
OR
opensslopensslMatch0.9.8f
OR
opensslopensslMatch0.9.8g
OR
opensslopensslMatch0.9.8h
OR
opensslopensslMatch0.9.8i
OR
opensslopensslMatch0.9.8j
OR
opensslopensslMatch0.9.8k
OR
opensslopensslMatch0.9.8l
OR
opensslopensslMatch0.9.8m
OR
opensslopensslMatch0.9.8n
OR
opensslopensslMatch0.9.8o
OR
opensslopensslMatch0.9.8p
OR
opensslopensslMatch0.9.8q
OR
opensslopensslMatch0.9.8r
OR
opensslopensslMatch0.9.8s
Node
opensslopensslMatch1.0.0
OR
opensslopensslMatch1.0.0beta1
OR
opensslopensslMatch1.0.0beta2
OR
opensslopensslMatch1.0.0beta3
OR
opensslopensslMatch1.0.0beta4
OR
opensslopensslMatch1.0.0beta5
OR
opensslopensslMatch1.0.0a
OR
opensslopensslMatch1.0.0b
OR
opensslopensslMatch1.0.0c
OR
opensslopensslMatch1.0.0d

Related

nessus 16
ubuntucve 1
checkpoint_advisories 2
openvas 13
openssl 1
prion 1
debiancve 1
cvelist 1
nvd 1
f5 2
freebsd 1
securityvulns 2
debian 1
ibm 8
ubuntu 1
gentoo 1
lenovo 2
nessus
nessus
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 7766)
2011-10-24 00:00:00
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 7760)
2011-12-13 00:00:00
SuSE 11.1 Security Update : libopenssl (SAT Patch Number 5160)
2011-12-13 00:00:00
ubuntucve
ubuntucve
CVE-2011-3210
2011-09-22 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL Handshake Sequence Cipher Suite Use-After-Free (CVE-2011-3210)
2012-05-14 00:00:00
OpenSSL Handshake Requests ECDH Use-After-Free (CVE-2011-3210)
2012-05-14 00:00:00
openvas
openvas
OpenSSL: TLS Ephemeral ECDH Crashes (20110906) - Windows
2021-08-16 00:00:00
OpenSSL: TLS Ephemeral ECDH Crashes (20110906) - Linux
2021-08-16 00:00:00
FreeBSD Ports: openssl
2011-09-21 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2011-3210
2011-09-06 00:00:00
prion
prion
Code injection
2011-09-22 10:55:00
debiancve
debiancve
CVE-2011-3210
2011-09-22 10:55:03
cvelist
cvelist
CVE-2011-3210
2011-09-22 10:00:00
nvd
nvd
CVE-2011-3210
2011-09-22 10:55:03
f5
f5
K16834 : OpenSSL vulnerability CVE-2011-3210
2015-07-01 00:00:00
SOL16834 - OpenSSL vulnerability CVE-2011-3210
2015-07-01 00:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2011-09-06 00:00:00
securityvulns
securityvulns
OpenSSL security vulnerabilities
2011-10-16 00:00:00
APPLE-SA-2013-06-04-1 OS X Mountain Lion v10.8.4 and Security Update 2013-002
2013-06-17 00:00:00
debian
debian
[BSA-060] Security Update for openssl
2011-11-14 04:20:38
ibm
ibm
Security Bulletin: IBM XIV Storage System Gen3 (CVE-2011-4619, CVE-2011-4576, CVE-2011-3210, CVE-2012-4829)
2022-09-26 04:23:14
Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000 and D5100 and IBM Smart Analytics System 1050, 2050, 5600 and 5710 are affected by vulnerabilities in OpenSSL
2022-09-25 23:13:40
Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by multiple OpenSSL vulnerabilities
2022-09-26 05:45:55
ubuntu
ubuntu
OpenSSL vulnerabilities
2012-02-09 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2011-10-09 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.7 High

AI Score

Confidence

High

0.305 Low

EPSS

Percentile

97.0%

JSON
Related for CVE-2011-3210
nessus16ubuntucve1checkpoint_advisories2openvas13openssl1prion1debiancve1cvelist1nvd1f52freebsd1securityvulns2debian1ibm8ubuntu1gentoo1lenovo2