CVE-2011-3207

crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL…

published September 22, 2011

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04359 · 91.1th percentile
Published
2011-09-22T10:00Z
EPSS history
Timeline
  • 22 SEP 10:00Z
    crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL…
    cvelistv5