Description

OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.

Remediation

References

CVE-2011-4577

Related Vulnerabilities

WebLogic Out-of-bounds Write Vulnerability (CVE-2020-36518)

WordPress Plugin No Follow All External Links Spam Injection (2.3.0)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43725)

Magento Session Fixation Vulnerability (CVE-2019-7849)

WordPress Plugin Scout bazar Cross-Site Scripting (1.3.3)

Severity

Medium

Classification

CVE-2011-4577

Tags

Missing Update Known Vulnerabilities