Home > Vulnerability Database > CVE-2011-4576

Mend.io Vulnerability Database

CVE-2011-4576

Good to know:

Date: January 5, 2012

The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.

Language: C

Severity Score

6.8

Related Resources (27)

Url: http://marc.info/?l=bugtraq&m=134039053214295&w=2

Url: http://secunia.com/advisories/57353

Url: http://rhn.redhat.com/errata/RHSA-2012-1307.html

Url: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html

Url: http://rhn.redhat.com/errata/RHSA-2012-1308.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html

Url: http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2011-4576

Url: http://www.openssl.org/news/secadv_20120104.txt

Url: http://secunia.com/advisories/55069

Url: http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html

Url: http://support.apple.com/kb/HT5784

Url: http://marc.info/?l=bugtraq&m=133951357207000&w=2

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2012:007

Url: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Url: http://www.kb.cert.org/vuls/id/737740

Url: http://secunia.com/advisories/48528

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2012:006

Url: http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-4576

Url: http://marc.info/?l=bugtraq&m=132750648501816&w=2

Url: https://security-tracker.debian.org/tracker/CVE-2011-4576

Url: https://access.redhat.com/security/cve/CVE-2011-4576

Url: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html

Url: http://www.debian.org/security/2012/dsa-2390

Url: http://rhn.redhat.com/errata/RHSA-2012-1306.html

Url: https://www.mend.io/vulnerability-database/CVE-2011-4576

Severity Score

6.8

Weakness Type (CWE)

Cryptographic Issues

CWE-310

Top Fix

Upgrade Version

Upgrade to version 0.9.8s,1.0.0f

Learn More

CVSS v3

Base Score:	6.8
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL

CVSS v2

Base Score:	3.7
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	LOW
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2011-4576

Good to know:

Date: January 5, 2012

Language: C

Severity Score

Related Resources (27)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3

CVSS v2

Do you need more information?