Secunia
Login
|
|
CVE Reference: CVE-2011-3210 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2011-3210 |
|
|
Description: The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol. |
|
|
CVE Status: Candidate |
|
|
References: ST 1026012 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2011:137 HP http://marc.info/?l=bugtraq&m=133226187115472&w=2 http://marc.info/?l=bugtraq&m=132750648501816&w=2 CONFIRM http://openssl.org/news/secadv_20110906.txt http://support.apple.com/kb/HT5784 http://cvs.openssl.org/chngview?cn=21337 APPLE http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html |
|
| Return to the previous page. |
