Lucene search
OpenSSLOPENSSL:CVE-2011-3210HistorySep 06, 2011 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2011-3210
2011-09-0600:00:00
www.openssl.org
14
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.1 Medium
AI Score
Confidence
Low
0.305 Low
EPSS
Percentile
97.0%
OpenSSL server code for ephemeral ECDH ciphersuites is not thread-safe, and furthermore can crash if a client violates the protocol by sending handshake messages in incorrect order. Only server-side applications that specifically support ephemeral ECDH ciphersuites are affected, and only if ephemeral ECDH ciphersuites are enabled in the configuration.
Related
nessus
nessus
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 7766)
2011-10-24 00:00:00
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 7760)
2011-12-13 00:00:00
SuSE 11.1 Security Update : libopenssl (SAT Patch Number 5160)
2011-12-13 00:00:00
ubuntucve
ubuntucve
CVE-2011-3210
2011-09-22 00:00:00
openvas
openvas
OpenSSL: TLS Ephemeral ECDH Crashes (20110906) - Linux
2021-08-16 00:00:00
OpenSSL: TLS Ephemeral ECDH Crashes (20110906) - Windows
2021-08-16 00:00:00
FreeBSD Ports: openssl
2011-09-21 00:00:00
cve
cve
CVE-2011-3210
2011-09-22 10:55:03
checkpoint_advisories
checkpoint_advisories
OpenSSL Handshake Sequence Cipher Suite Use-After-Free (CVE-2011-3210)
2012-05-14 00:00:00
OpenSSL Handshake Requests ECDH Use-After-Free (CVE-2011-3210)
2012-05-14 00:00:00
prion
prion
Code injection
2011-09-22 10:55:00
debiancve
debiancve
CVE-2011-3210
2011-09-22 10:55:03
cvelist
cvelist
CVE-2011-3210
2011-09-22 10:00:00
nvd
nvd
CVE-2011-3210
2011-09-22 10:55:03
f5
f5
K16834 : OpenSSL vulnerability CVE-2011-3210
2015-07-01 00:00:00
SOL16834 - OpenSSL vulnerability CVE-2011-3210
2015-07-01 00:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2011-09-06 00:00:00
securityvulns
securityvulns
OpenSSL security vulnerabilities
2011-10-16 00:00:00
debian
debian
[BSA-060] Security Update for openssl
2011-11-14 04:20:38
ibm
ibm
ubuntu
ubuntu
OpenSSL vulnerabilities
2012-02-09 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2011-10-09 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.1 Medium
AI Score
Confidence
Low
0.305 Low
EPSS
Percentile
97.0%
Related for OPENSSL:CVE-2011-3210