{"action":"Upgrade openssl to 1.0.1i-1 or later.","affected":[{"fixed":"1.0.1i-1","introduced":"0"}],"component":"openssl","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.0.1i-1"],"id":"tcs_01M5NAS4FHEGC2VG6QEY1DCNEQ","modified_at":"2026-10-23T15:47:23.251124914Z","published_at":"2014-08-13T23:55:07.623Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-3511","https://security-tracker.debian.org/tracker/CVE-2014-3511"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-3511","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-3511"}],"summary":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in commu"}