{"id":"CVE-2010-4180","aliases":["DEBIAN-CVE-2010-4180","DSA-2141-1","EUVD-2010-4155","GHSA-hvp6-pw37-63wh","RHSA-2010:0977","RHSA-2010:0978","RHSA-2010:0979","SUSE-SU-2015:1184-1","SUSE-SU-403"],"status":"published","title":"OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is...","description":"OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.09497,"percentile":0.95476,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2010-12-06T21:00:00Z","modified":"2026-10-23T17:47:40Z","fixes":[{"ecosystem":"Debian:12","package":"openssl","fixed_in":["0.9.8o-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["0.9.8o-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["0.9.8o-4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-debuginfo","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-devel","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-perl","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-static","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-debuginfo","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-devel","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-perl","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-static","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-debuginfo","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-perl","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-static","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-devel","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-debuginfo","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-perl","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-static","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-devel","fixed_in":["0:1.0.0-4.el6_0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8o-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8o-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8o-4"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8g-15+lenny11"}]}],"versions":["0.9.8g-15","0.9.8g-15+lenny1","0.9.8g-15+lenny3","0.9.8g-15+lenny5","0.9.8g-15+lenny6","0.9.8g-15+lenny7","0.9.8g-15+lenny8","0.9.8g-15+lenny9"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.17.el4_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_5.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_5.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_5.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_5.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_5.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_5.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_5.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_5.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_5.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-12.el5_5.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6_0.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"f5","product":"nginx"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"openssl","product":"openssl"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"suse","product":"linux_enterprise"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_server"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.securitytracker.com/id?1024822","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://secunia.com/advisories/42473","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://secunia.com/advisories/42571","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://secunia.com/advisories/43170","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.668471","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0268","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://support.apple.com/kb/HT4723","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://secunia.com/advisories/42493","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://secunia.com/advisories/43173","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052027.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.vupen.com/english/advisories/2011/0032","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://secunia.com/advisories/43171","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://secunia.com/advisories/42620","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://www.securityfocus.com/archive/1/522176","tags":["vendor-advisory","x_refsource_HP","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Broken Link","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"http://ubuntu.com/usn/usn-1029-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3120","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required","report"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052315.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.vupen.com/english/advisories/2010/3122","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required","report"]},{"url":"http://secunia.com/advisories/43169","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://secunia.com/advisories/43172","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=132077688910227\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"http://www.securityfocus.com/bid/45164","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://osvdb.org/69565","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=659462","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"http://www.kb.cert.org/vuls/id/737740","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://secunia.com/advisories/42469","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=130497251507577\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"http://secunia.com/advisories/42877","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=20131","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Patch","fix","web"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0977.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777","tags":["vendor-advisory","x_refsource_HP","x_transferred","Broken Link","web"]},{"url":"http://www.vupen.com/english/advisories/2010/3134","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required","report"]},{"url":"http://www.vupen.com/english/advisories/2010/3188","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required","report"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18910","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Third Party Advisory","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=129916880600544\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"http://www.vupen.com/english/advisories/2011/0076","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required","report"]},{"url":"http://openssl.org/news/secadv_20101202.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0978.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/44269","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2141","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:248","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Permissions Required","report"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0979.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://kb.bluecoat.com/index?page=content\u0026id=SA53\u0026actp=LIST","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","web"]},{"url":"http://secunia.com/advisories/42811","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4180","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hvp6-pw37-63wh"},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-4180","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0977","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=570924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=660650","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0977.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-7270","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-7270","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-7270","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3245","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3245","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3245","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4180","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4180","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0978","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0978.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0979","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0979.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151184-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/608666","tags":["report"]},{"url":"https://bugzilla.suse.com/629905","tags":["report"]},{"url":"https://bugzilla.suse.com/651003","tags":["report"]},{"url":"https://bugzilla.suse.com/657663","tags":["report"]},{"url":"https://bugzilla.suse.com/670526","tags":["report"]},{"url":"https://bugzilla.suse.com/693027","tags":["report"]},{"url":"https://bugzilla.suse.com/716144","tags":["report"]},{"url":"https://bugzilla.suse.com/739719","tags":["report"]},{"url":"https://bugzilla.suse.com/742821","tags":["report"]},{"url":"https://bugzilla.suse.com/743344","tags":["report"]},{"url":"https://bugzilla.suse.com/748738","tags":["report"]},{"url":"https://bugzilla.suse.com/749210","tags":["report"]},{"url":"https://bugzilla.suse.com/749213","tags":["report"]},{"url":"https://bugzilla.suse.com/749735","tags":["report"]},{"url":"https://bugzilla.suse.com/751946","tags":["report"]},{"url":"https://bugzilla.suse.com/751977","tags":["report"]},{"url":"https://bugzilla.suse.com/755395","tags":["report"]},{"url":"https://bugzilla.suse.com/758060","tags":["report"]},{"url":"https://bugzilla.suse.com/761324","tags":["report"]},{"url":"https://bugzilla.suse.com/761838","tags":["report"]},{"url":"https://bugzilla.suse.com/767256","tags":["report"]},{"url":"https://bugzilla.suse.com/768097","tags":["report"]},{"url":"https://bugzilla.suse.com/779952","tags":["report"]},{"url":"https://bugzilla.suse.com/802648","tags":["report"]},{"url":"https://bugzilla.suse.com/802746","tags":["report"]},{"url":"https://bugzilla.suse.com/859228","tags":["report"]},{"url":"https://bugzilla.suse.com/859924","tags":["report"]},{"url":"https://bugzilla.suse.com/860332","tags":["report"]},{"url":"https://bugzilla.suse.com/862181","tags":["report"]},{"url":"https://bugzilla.suse.com/869945","tags":["report"]},{"url":"https://bugzilla.suse.com/870192","tags":["report"]},{"url":"https://bugzilla.suse.com/879179","tags":["report"]},{"url":"https://bugzilla.suse.com/880891","tags":["report"]},{"url":"https://bugzilla.suse.com/890764","tags":["report"]},{"url":"https://bugzilla.suse.com/890767","tags":["report"]},{"url":"https://bugzilla.suse.com/890768","tags":["report"]},{"url":"https://bugzilla.suse.com/890769","tags":["report"]},{"url":"https://bugzilla.suse.com/890770","tags":["report"]},{"url":"https://bugzilla.suse.com/892403","tags":["report"]},{"url":"https://bugzilla.suse.com/901223","tags":["report"]},{"url":"https://bugzilla.suse.com/901277","tags":["report"]},{"url":"https://bugzilla.suse.com/912014","tags":["report"]},{"url":"https://bugzilla.suse.com/912015","tags":["report"]},{"url":"https://bugzilla.suse.com/912018","tags":["report"]},{"url":"https://bugzilla.suse.com/912293","tags":["report"]},{"url":"https://bugzilla.suse.com/912294","tags":["report"]},{"url":"https://bugzilla.suse.com/912296","tags":["report"]},{"url":"https://bugzilla.suse.com/915976","tags":["report"]},{"url":"https://bugzilla.suse.com/919648","tags":["report"]},{"url":"https://bugzilla.suse.com/920236","tags":["report"]},{"url":"https://bugzilla.suse.com/922488","tags":["report"]},{"url":"https://bugzilla.suse.com/922496","tags":["report"]},{"url":"https://bugzilla.suse.com/922499","tags":["report"]},{"url":"https://bugzilla.suse.com/922500","tags":["report"]},{"url":"https://bugzilla.suse.com/922501","tags":["report"]},{"url":"https://bugzilla.suse.com/929678","tags":["report"]},{"url":"https://bugzilla.suse.com/931698","tags":["report"]},{"url":"https://bugzilla.suse.com/933898","tags":["report"]},{"url":"https://bugzilla.suse.com/933911","tags":["report"]},{"url":"https://bugzilla.suse.com/934487","tags":["report"]},{"url":"https://bugzilla.suse.com/934489","tags":["report"]},{"url":"https://bugzilla.suse.com/934491","tags":["report"]},{"url":"https://bugzilla.suse.com/934493","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-5146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-5095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement//suse-su-403/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement//suse-su-403 forbidden-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-4180","description":"OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.","status":"published","published":"2010-12-06T21:00:00Z","modified":"2024-08-07T03:34:37.524Z","updated_at":"2026-11-02T14:33:28.858903Z"}],"euvd":[{"id":"EUVD-2010-4155","description":"OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.","status":"published","published":"2010-12-06T21:00:00Z","modified":"2024-08-07T03:34:37Z","updated_at":"2026-11-03T01:39:31.566203Z"}],"ghsa":[{"id":"GHSA-hvp6-pw37-63wh","title":"OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is...","description":"OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.","status":"published","published":"2022-05-17T01:03:13Z","modified":"2023-02-03T05:03:06Z","updated_at":"2026-11-02T14:53:17.668091Z"}],"nvd":[{"id":"CVE-2010-4180","description":"OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.","status":"published","published":"2010-12-06T21:05:48.687Z","modified":"2026-06-16T23:24:18.13Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:00.37682Z"}],"osv":[{"id":"CVE-2010-4180","description":"OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.","status":"published","published":"2010-12-06T21:05:48Z","modified":"2026-04-10T03:41:29.701298Z","updated_at":"2026-11-02T15:43:57.991581Z"},{"id":"DEBIAN-CVE-2010-4180","description":"OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.","status":"published","published":"2010-12-06T21:05:48.687Z","modified":"2026-10-23T17:47:40.566488665Z","updated_at":"2026-11-02T15:45:24.316685Z"},{"id":"DSA-2141-1","title":"openssl - protocol design flaw","status":"published","published":"2011-01-06T00:00:00Z","modified":"2026-03-09T01:17:47.871063Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"RHSA-2010:0977","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T18:49:26Z","modified":"2026-06-29T10:03:44Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"RHSA-2010:0978","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T18:49:31Z","modified":"2026-06-26T12:21:31.06736963Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"RHSA-2010:0979","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T18:49:35Z","modified":"2026-06-26T12:21:30.883738458Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"SUSE-SU-2015:1184-1","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T03:17:21.888768Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-403","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T02:43:34.868415Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-403 Forbidden-1","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T03:35:11.255833Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}