CVE-2011-4577
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote...
4.3 MediumFix available
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
Exploit likelihood
8.19%Up 1.6 points since Feb 4, 2022
What each source reports
NVD Score used
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
- Record
CVE-2011-4577- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
- Record
CVE-2011-4577- Updated
- 2026-11-02
EUVDEUVD-2011-4503 No score
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
- Record
EUVD-2011-4503- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-566r-v75p-wp79 No score
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote...
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
- Record
GHSA-566r-v75p-wp79- Updated
- 2026-11-02
OSV No score
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
- Record
CVE-2011-4577- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-4577 No score
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
- Record
DEBIAN-CVE-2011-4577- Updated
- 2026-11-02
Show 7 moreShow less
OSVopenSUSE-SU-2024:10271-1 No score
libopenssl-devel-1.0.2j-2.2 on GA media
These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10271-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10529-1 No score
libopenssl1_0_0-steam-1.0.2h-4.1 on GA media
These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10529-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11127-1 No score
libopenssl-1_1-devel-1.1.1l-1.2 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11127-1- Updated
- 2026-11-02
OSVSUSE-FU-2022:0445-1 No score
Feature update for venv-salt-minion
This feature update for venv-salt-minion provides the following changes:
- Introduce
venv-salt-minion. - Mention fixed issues provided with the bundle.
- Record
SUSE-FU-2022:0445-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1184-1 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-2015:1184-1- Updated
- 2026-11-02
OSVSUSE-SU-403 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-403- Updated
- 2026-11-02
OSVSUSE-SU-403 Forbidden-1 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-403 Forbidden-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslDebian:12 |
before 1.0.0f-1 | 1.0.0f-1 |
opensslDebian:13 |
before 1.0.0f-1 | 1.0.0f-1 |
opensslDebian:14 |
before 1.0.0f-1 | 1.0.0f-1 |
opensslRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-develRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-perlRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-staticRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
opensslRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
Show 42 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openssl-develRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-perlRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-staticRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
opensslRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-perlRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-staticRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
opensslRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-develRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-perlRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
openssl-staticRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:1.0.0-20.el6_2.1 | 0:1.0.0-20.el6_2.1 |
rhev-hypervisor6Red Hat:enterprise_linux:6::hypervisor From an advisory covering 4 CVEs |
before 0:6.2-20120209.0.el6_2 | 0:6.2-20120209.0.el6_2 |
rhev-hypervisor6-toolsRed Hat:enterprise_linux:6::hypervisor From an advisory covering 4 CVEs |
before 0:6.2-20120209.0.el6_2 | 0:6.2-20120209.0.el6_2 |
libqt4SUSE:Linux Enterprise Desktop 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Desktop 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
openssl-1_1openSUSE:Tumbleweed From an advisory covering 136 CVEs |
before 1.1.1l-1.2 | 1.1.1l-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4577 is a medium vulnerability (CVSS 4.3) in Openssl, published January 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.19%, the 94th percentile. Fixed in openssl 1.0.0f-1.
References
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html
lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html
openssl.org/news/secadv_20120104.txt
Show 194 moreShow less
support.apple.com/kb/HT5784
lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
kb.cert.org/vuls/id/737740
marc.info?l=bugtraq&m=132750648501816&w=2
secunia.com/advisories/57353
nvd.nist.gov/vuln/detail/CVE-2011-4577
github.com/advisories/GHSA-566r-v75p-wp79
security-tracker.debian.org/tracker/CVE-2011-4577
access.redhat.com/errata/RHSA-2012:0059
bugzilla.redhat.com/show_bug.cgi?id=771770
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0059.json
cve.org/CVERecord?id=CVE-2011-4108
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/Technical_Notes
suse.com/support/update/announcement/-2022-445/suse-fu-20220445-1
bugzilla.suse.com/1000080
This page doesn't list everything
Left out here: 561 references. The JSON record has them.