NVD

Id
9892  
Name
CVE-2011-3210  
Description
The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-09-22  
Modified Date
2014-03-26  
Seq
2011-3210  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
56815 9892 CVE-2011-3210 http://cvs.openssl.org/chngview?cn=21337  View
56816 9892 CVE-2011-3210 APPLE-SA-2013-06-04-1  View
56817 9892 CVE-2011-3210 HPSBUX02734  View
56818 9892 CVE-2011-3210 HPSBMU02752  View
56819 9892 CVE-2011-3210 http://openssl.org/news/secadv_20110906.txt  View
56820 9892 CVE-2011-3210 http://support.apple.com/kb/HT5784  View
56821 9892 CVE-2011-3210 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564  View
56822 9892 CVE-2011-3210 MDVSA-2011:137  View
56823 9892 CVE-2011-3210 1026012  View
56824 9892 CVE-2011-3210 https://bugzilla.redhat.com/show_bug.cgi?id=736079  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32017 JVNDB-2011-002257 OpenSSL の ephemeral ECDH ciphersuite におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 OpenSSL の ephemeral ECDH ciphersuite は、ハンドシェイクメッセージを処理している間、スレッドの安全性を確認しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-3210 51117 CVE-2011-3210 9892 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002257.html 2011-09-06 2013-06-07 View