Unscored severity · published Sep 22, 2011
CVE-2011-3210
The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from…
–
CVSS
4.6%
EPSS
No
On KEV
Description
The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.6% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openssl · Openssl
0.9.8; 0.9.8a; 0.9.8b; 0.9.8c; 0.9.8d; 0.9.8e; +24 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3210
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3210
Patch
http://cvs.openssl.org/chngview?cn=21337
lists.apple.com
http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
marc.info
http://marc.info/?l=bugtraq&m=132750648501816&w=2
marc.info
http://marc.info/?l=bugtraq&m=133226187115472&w=2
Vendor Advisory
http://openssl.org/news/secadv_20110906.txt
secunia.com
http://secunia.com/advisories/57353
More from Openssl
7.5
CVE-2014-0160
OpenSSL Information Disclosure Vulnerability
9.8
CVE-2026-63073
Untrusted Sender DN Used as Format String in CMP Response Validation
9.8
CVE-2026-31789
Heap Buffer Overflow in Hexadecimal Conversion
9.8
CVE-2022-2274
RSA implementation bug in AVX512IFMA instructions
9.8
CVE-2021-3711
SM2 Decryption Buffer Overflow