Skip to content
OpenAdvisories
Unscored DSA-2390-1 5 CVEs

openssl - several

Published Jan 15, 2012 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 openssl 0.9.8g-15+lenny15
Debian · 6.0 openssl 0.9.8o-4squeeze5

Vulnerabilities 5

  • Unscored —
    CVE-2011-4108 EPSS 16%

    The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is …

  • Unscored —
    CVE-2011-4109 EPSS 17%

    Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attac…

  • Unscored —

    crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain cir…

  • Unscored —
    CVE-2011-4576 EPSS 16%

    The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures …

  • Unscored —
    CVE-2011-4619 EPSS 18%

    The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly han…