CVE-2011-3210
Estado: ModificadaMedia (5)—
The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
- Puntuación base: 5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 4.56%
- Percentil entre todas las CVEs puntuadas: 91
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-399
Referencias
- http://cvs.openssl.org/chngview?cn=21337
- http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
- http://marc.info/?l=bugtraq&m=132750648501816&w=2
- http://marc.info/?l=bugtraq&m=133226187115472&w=2
- http://openssl.org/news/secadv_20110906.txt
- http://secunia.com/advisories/57353
- http://support.apple.com/kb/HT5784
- http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:137
- http://www.securitytracker.com/id?1026012
- https://bugzilla.redhat.com/show_bug.cgi?id=736079
- http://cvs.openssl.org/chngview?cn=21337
- http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
- http://marc.info/?l=bugtraq&m=132750648501816&w=2
- http://marc.info/?l=bugtraq&m=133226187115472&w=2
- http://openssl.org/news/secadv_20110906.txt
- http://secunia.com/advisories/57353
- http://support.apple.com/kb/HT5784
- http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:137
- http://www.securitytracker.com/id?1026012
- https://bugzilla.redhat.com/show_bug.cgi?id=736079
JSON original (NVD)
Mostrar
{
"id": "CVE-2011-3210",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-09-22T10:55:03.523",
"references": [
{
"url": "http://cvs.openssl.org/chngview?cn=21337",
"tags": [
"Patch"
],
"source": "secalert@redhat.com"
},
{
"url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html",
"source": "secalert@redhat.com"
},
{
"url": "http://marc.info/?l=bugtraq&m=132750648501816&w=2",
"source": "secalert@redhat.com"
},
{
"url": "http://marc.info/?l=bugtraq&m=133226187115472&w=2",
"source": "secalert@redhat.com"
},
{
"url": "http://openssl.org/news/secadv_20110906.txt",
"tags": [
"Vendor Advisory"
],
"source": "secalert@redhat.com"
},
{
"url": "http://secunia.com/advisories/57353",
"source": "secalert@redhat.com"
},
{
"url": "http://support.apple.com/kb/HT5784",
"source": "secalert@redhat.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564",
"source": "secalert@redhat.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:137",
"source": "secalert@redhat.com"
},
{
"url": "http://www.securitytracker.com/id?1026012",
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=736079",
"source": "secalert@redhat.com"
},
{
"url": "http://cvs.openssl.org/chngview?cn=21337",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=132750648501816&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=133226187115472&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://openssl.org/news/secadv_20110906.txt",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/57353",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://support.apple.com/kb/HT5784",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:137",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1026012",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=736079",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol."
},
{
"lang": "es",
"value": "La efímera funcionalidad de cifrado ECDH en OpenSSL versiones v0.9.8 a v0.9.8s y v1.0.x antes de v1.0.0e no garantiza la seguridad de los subprocesos durante el procesamiento de los mensajes de 'handshake', lo que permite provocar una denegación de servicio (por caída de la aplicación) a atacantes remotos a través de mensajes 'desordenados' que violan el protocolo TLS."
}
],
"lastModified": "2026-06-16T23:32:53.130",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A4E446D-B9D3-45F2-9722-B41FA14A6C31"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF4EA988-FC80-4170-8933-7C6663731981"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64F8F53B-24A1-4877-B16E-F1917C4E4E81"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "75D3ACD5-905F-42BB-BE1A-8382E9D823BF"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "766EA6F2-7FA4-4713-9859-9971CCD2FDCB"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BB38AEA-BAF0-4920-9A71-747C24444770"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F33EA2B-DE15-4695-A383-7A337AC38908"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "261EE631-AB43-44FE-B02A-DFAAB8D35927"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A1365ED-4651-4AB2-A64B-43782EA2F0E8"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC82690C-DCED-47BA-AA93-4D0C9E95B806"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C9BF2DD-85EF-49CF-8D83-0DB46449E333"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "564AA4E7-223E-48D8-B3E0-A461969CF530"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35C2AE06-B6E8-41C4-BB60-177AC4819CE6"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45491BD3-7C62-4422-B7DA-CB2741890FBA"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A2075BD-6102-4B0F-839A-836E9585F43B"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F02E634E-1E3D-4E44-BADA-76F92483A732"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCC2B07A-49EF-411F-8A4D-89435E22B043"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E9480D6-3B6A-4C41-B8C1-C3F945040772"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10FF0A06-DA61-4250-B083-67E55E362677"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A6BA453-C150-4159-B80B-5465EFF83F11"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "638A2E69-8AB6-4FEA-852A-FEF16A500C1A"
},
{
"criteria": "cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56C47D3A-B99D-401D-B6B8-1194B2DB4809"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert@redhat.com"
}