CVE-2011-3210

The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of…

published September 22, 2011

CVSS
—
EPSS
5%
Percentile
91.5
In the wild
Unconfirmed
What it is

The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04561 · 91.5th percentile
Published
2011-09-22T10:00Z
EPSS history
Timeline
  • 22 SEP 10:00Z
    The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of…
    cvelistv5