CVE-2011-0014 in OpenSSL

Sumário (Inglês)

ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

07/12/2010

Divulgação

18/02/2011

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
4291	OpenSSL ClientHello Handshake Negação de Serviço	399	Prova de conceito	Correção oficial	CVE-2011-0014

Fontes

• MITRE
• NVD
• CVE Details