Test ID:	1.3.6.1.4.1.25623.1.0.112956
Category:	Denial of Service
Title:	OpenSSL: TLS Ephemeral ECDH Crashes (20110906) - Linux
Summary:	OpenSSL is prone to TLS ephemeral ECDH crashes.
Description:	Summary: OpenSSL is prone to TLS ephemeral ECDH crashes. Vulnerability Insight: OpenSSL server code for ephemeral ECDH ciphersuites is not thread-safe, and furthermore can crash if a client violates the protocol by sending handshake messages in incorrect order. Affected Software/OS: OpenSSL 0.9.8 through 0.9.8r and 1.0.0 through 1.0.0d. Solution: Update to version 1.0.0e or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3210 1026012 http://www.securitytracker.com/id?1026012 57353 http://secunia.com/advisories/57353 APPLE-SA-2013-06-04-1 http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html HPSBMU02752 http://marc.info/?l=bugtraq&m=133226187115472&w=2 HPSBUX02734 http://marc.info/?l=bugtraq&m=132750648501816&w=2 MDVSA-2011:137 http://www.mandriva.com/security/advisories?name=MDVSA-2011:137 SSRT100729 SSRT100802 http://cvs.openssl.org/chngview?cn=21337 http://openssl.org/news/secadv_20110906.txt http://support.apple.com/kb/HT5784 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 https://bugzilla.redhat.com/show_bug.cgi?id=736079
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.