Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2011-4577

OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.

Related bugs and status

CVE-2011-4577 (Candidate) is related to these bugs:

Bug #922229: OpenSSL DTLS Vulnerability

Summary				In	Importance	Status
	922229	OpenSSL DTLS Vulnerability		openssl (Ubuntu)	High	Fix Released

Bug #1811531: remote execution vulnerability

		In	Importance	Status
1811531	remote execution vulnerability	zeromq3 (Ubuntu)	Undecided	Fix Released
1811531	remote execution vulnerability	zeromq3 (Debian)	Unknown	Fix Released
1811531	remote execution vulnerability	zeromq (Suse)	High	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: http://secunia.com/adv...
MISC: http://lists.apple.com...
MISC: http://lists.fedorapro...
MISC: http://marc.info/?l=bu...
MISC: http://h20000.www2.hp....
MISC: http://marc.info/?l=bu...
MISC: http://lists.opensuse....
MISC: http://www.kb.cert.org...
MISC: http://support.apple.c...
MISC: http://www-01.ibm.com/...
MISC: http://www.openssl.org...
MISC: http://lists.opensuse....