Description

The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.

Remediation

References

CVE-2011-3210

Related Vulnerabilities

Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-43288)

WordPress Plugin EnvialoSimple:Email Marketing y Newsletters Multiple Cross-Site Scripting Vulnerabilities (1.97)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-1484)

PHP CVE-2004-1064 Vulnerability (CVE-2004-1064)

WordPress Plugin Pinterest Feed Multiple Vulnerabilities (1.1.1)

Severity

Medium

Classification

CVE-2011-3210

Tags

Missing Update Known Vulnerabilities