FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2011-4577

This CVE name corresponds to:

Entered Topic
2012-01-14 OpenSSL -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2011-4577
Phase Assigned(20111129)

Description

OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.

References

Source Reference
CONFIRM http://www.openssl.org/news/secadv_20120104.txt
CONFIRM http://support.apple.com/kb/HT5784
CONFIRM http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
APPLE APPLE-SA-2013-06-04-1
FEDORA FEDORA-2012-18035
HP HPSBMU02786
HP SSRT100877
HP HPSBOV02793
HP SSRT100891
HP HPSBUX02734
HP SSRT100729
SUSE SUSE-SU-2012:0084
SUSE openSUSE-SU-2012:0083
CERT-VN VU#737740
SECUNIA 57353