NVD

Id
7153  
Name
CVE-2011-0014  
Description
ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-02-18  
Modified Date
2016-08-22  
Seq
2011-0014  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
40052 7153 CVE-2011-0014 NetBSD-SA2011-002  View
40053 7153 CVE-2011-0014 SSRT100413  View
40054 7153 CVE-2011-0014 APPLE-SA-2011-06-23-1  View
40055 7153 CVE-2011-0014 FEDORA-2011-1273  View
40056 7153 CVE-2011-0014 SUSE-SR:2011:005  View
40057 7153 CVE-2011-0014 SSRT100475  View
40058 7153 CVE-2011-0014 SSRT100494  View
40059 7153 CVE-2011-0014 oval:org.mitre.oval:def:18985  View
40060 7153 CVE-2011-0014 SSA:2011-041-04  View
40061 7153 CVE-2011-0014 http://support.apple.com/kb/HT4723  View
40062 7153 CVE-2011-0014 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564  View
40063 7153 CVE-2011-0014 DSA-2162  View
40064 7153 CVE-2011-0014 MDVSA-2011:028  View
40065 7153 CVE-2011-0014 http://www.openssl.org/news/secadv_20110208.txt  View
40066 7153 CVE-2011-0014 RHSA-2011:0677  View
40067 7153 CVE-2011-0014 46264  View
40068 7153 CVE-2011-0014 1025050  View
40069 7153 CVE-2011-0014 USN-1064-1  View
40070 7153 CVE-2011-0014 ADV-2011-0361  View
40071 7153 CVE-2011-0014 ADV-2011-0387  View
40072 7153 CVE-2011-0014 ADV-2011-0389  View
40073 7153 CVE-2011-0014 ADV-2011-0395  View
40074 7153 CVE-2011-0014 ADV-2011-0399  View
40075 7153 CVE-2011-0014 ADV-2011-0603  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31007 JVNDB-2011-001246 OpenSSL の ssl/t1_lib.c におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の ssl/t1_lib.c には、ClientHello ハンドシェイクメッセージに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または OpenSSL を使用するアプリケーションの重要な情報を取得される脆弱性が存在します。 CVE-2011-0014 47921 CVE-2011-0014 7153 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001246.html 2011-02-08 2012-11-02 View