CVE-2011-0014
- State
- Published
- Severity
- Not scored
- Published
- Feb 18, 2011
- Updated
- Aug 6, 2024
- Reserved
- Dec 7, 2010
Description
ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2011-0361vdb-entry
- SSA:2011-041-04vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- 70847vdb-entry
- http://support.apple.com/kb/HT4723
- ADV-2011-0399vdb-entry
- RHSA-2011:0677vendor-advisory
- 43301third-party-advisory
- oval:org.mitre.oval:def:18985vdb-entrysignature
- APPLE-SA-2011-06-23-1vendor-advisory
- ADV-2011-0387vdb-entry
- 43286third-party-advisory
- SUSE-SR:2011:005vendor-advisory
- DSA-2162vendor-advisory
- ADV-2011-0395vdb-entry
- NetBSD-SA2011-002vendor-advisory
- USN-1064-1vendor-advisory
- SSRT100475vendor-advisory
- HPSBMA02658vendor-advisory
- 43227third-party-advisory
- ADV-2011-0389vdb-entry
- MDVSA-2011:028vendor-advisory
- FEDORA-2011-1273vendor-advisory
- 46264vdb-entry
- 57353third-party-advisory
- HPSBUX02689vendor-advisory
- http://www.openssl.org/news/secadv_20110208.txt
- 44269third-party-advisory
- 43339third-party-advisory
- ADV-2011-0603vdb-entry
- 1025050vdb-entry
- https://support.f5.com/csp/article/K10534046
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.