Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-3210HistorySep 22, 2011 - 10:55 a.m.
CVE-2011-3210
2011-09-2210:55:03
Debian Security Bug Tracker
security-tracker.debian.org
11
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.305 Low
EPSS
Percentile
97.0%
The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.0e-1 | openssl_1.0.0e-1_all.deb |
| Debian | 11 | all | openssl | < 1.0.0e-1 | openssl_1.0.0e-1_all.deb |
| Debian | 999 | all | openssl | < 1.0.0e-1 | openssl_1.0.0e-1_all.deb |
| Debian | 13 | all | openssl | < 1.0.0e-1 | openssl_1.0.0e-1_all.deb |
Related
cve
cve
CVE-2011-3210
2011-09-22 10:55:03
checkpoint_advisories
checkpoint_advisories
OpenSSL Handshake Sequence Cipher Suite Use-After-Free (CVE-2011-3210)
2012-05-14 00:00:00
OpenSSL Handshake Requests ECDH Use-After-Free (CVE-2011-3210)
2012-05-14 00:00:00
openvas
openvas
OpenSSL: TLS Ephemeral ECDH Crashes (20110906) - Windows
2021-08-16 00:00:00
OpenSSL: TLS Ephemeral ECDH Crashes (20110906) - Linux
2021-08-16 00:00:00
FreeBSD Ports: openssl
2011-09-21 00:00:00
nessus
nessus
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 7766)
2011-10-24 00:00:00
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 7760)
2011-12-13 00:00:00
SuSE 11.1 Security Update : libopenssl (SAT Patch Number 5160)
2011-12-13 00:00:00
ubuntucve
ubuntucve
CVE-2011-3210
2011-09-22 00:00:00
nvd
nvd
CVE-2011-3210
2011-09-22 10:55:03
openssl
openssl
Vulnerability in OpenSSL CVE-2011-3210
2011-09-06 00:00:00
prion
prion
Code injection
2011-09-22 10:55:00
cvelist
cvelist
CVE-2011-3210
2011-09-22 10:00:00
f5
f5
K16834 : OpenSSL vulnerability CVE-2011-3210
2015-07-01 00:00:00
SOL16834 - OpenSSL vulnerability CVE-2011-3210
2015-07-01 00:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2011-09-06 00:00:00
securityvulns
securityvulns
OpenSSL security vulnerabilities
2011-10-16 00:00:00
debian
debian
[BSA-060] Security Update for openssl
2011-11-14 04:20:38
ibm
ibm
ubuntu
ubuntu
OpenSSL vulnerabilities
2012-02-09 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2011-10-09 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.305 Low
EPSS
Percentile
97.0%
Related for DEBIANCVE:CVE-2011-3210