Debian/openssl: unknown
The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows re
Action: Upgrade openssl to 1.0.0e-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0e-1 | - |
Fixed versions
| 1.0.0e-1 |
Sources
- osv: DEBIAN-CVE-2011-3210#Debian:14/openssl
- https://security-tracker.debian.org/tracker/CVE-2011-3210
published · modified · JSON