NVD

Id
10634  
Name
CVE-2011-4108  
Description
The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2012-01-05  
Modified Date
2016-08-22  
Seq
2011-4108  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60109 10634 CVE-2011-4108 http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc  View
60110 10634 CVE-2011-4108 SSRT100877  View
60111 10634 CVE-2011-4108 APPLE-SA-2013-06-04-1  View
60112 10634 CVE-2011-4108 FEDORA-2012-18035  View
60113 10634 CVE-2011-4108 openSUSE-SU-2012:0083  View
60114 10634 CVE-2011-4108 SUSE-SU-2012:0084  View
60115 10634 CVE-2011-4108 SUSE-SU-2014:0320  View
60116 10634 CVE-2011-4108 SSRT100729  View
60117 10634 CVE-2011-4108 SSRT100852  View
60118 10634 CVE-2011-4108 SSRT100891  View
60119 10634 CVE-2011-4108 RHSA-2012:1306  View
60120 10634 CVE-2011-4108 RHSA-2012:1307  View
60121 10634 CVE-2011-4108 RHSA-2012:1308  View
60122 10634 CVE-2011-4108 http://support.apple.com/kb/HT5784  View
60123 10634 CVE-2011-4108 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564  View
60124 10634 CVE-2011-4108 DSA-2390  View
60125 10634 CVE-2011-4108 http://www.isg.rhul.ac.uk/~kp/dtls.pdf  View
60126 10634 CVE-2011-4108 VU#737740  View
60127 10634 CVE-2011-4108 MDVSA-2012:006  View
60128 10634 CVE-2011-4108 MDVSA-2012:007  View
60129 10634 CVE-2011-4108 http://www.openssl.org/news/secadv_20120104.txt  View
60130 10634 CVE-2011-4108 https://securityadvisories.paloaltonetworks.com/Home/Detail/17  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25310 JVNDB-2012-001017 OpenSSL の DTLS の実装における平文を復元される脆弱性 OpenSSL の DTLS の実装は、特定のパディングが有効である場合のみ MAC のチェックを実行するため、平文を復元される脆弱性が存在します。 CVE-2011-4108 52015 CVE-2011-4108 10634 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001017.html 2012-01-04 2014-06-26 View