CVE-2011-4109: Double Free
Published Jan 6, 2012
·Updated
Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509VFLAGPOLICYCHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.
Affected Software
19 affected components
OpenSSL OpenSSL=0.9.8
OpenSSL OpenSSL=0.9.8a
OpenSSL OpenSSL=0.9.8b
OpenSSL OpenSSL=0.9.8c
OpenSSL OpenSSL=0.9.8d
OpenSSL OpenSSL=0.9.8e
OpenSSL OpenSSL=0.9.8f
OpenSSL OpenSSL=0.9.8g
OpenSSL OpenSSL=0.9.8h
OpenSSL OpenSSL=0.9.8i
OpenSSL OpenSSL=0.9.8j
OpenSSL OpenSSL=0.9.8k
OpenSSL OpenSSL=0.9.8l
OpenSSL OpenSSL=0.9.8m
OpenSSL OpenSSL=0.9.8n
OpenSSL OpenSSL=0.9.8o
OpenSSL OpenSSL=0.9.8p
OpenSSL OpenSSL=0.9.8q
OpenSSL OpenSSL=0.9.8r
Event History
Jan 6, 2012
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4109?
CVE-2011-4109 is considered a moderate severity vulnerability due to its potential impact on policy checks.
2
How do I fix CVE-2011-4109?
To fix CVE-2011-4109, you should upgrade OpenSSL to version 0.9.8s or later.
3
What versions of OpenSSL are affected by CVE-2011-4109?
CVE-2011-4109 affects all OpenSSL versions prior to 0.9.8s, including 0.9.8 through 0.9.8r.
4
What types of attacks can exploit CVE-2011-4109?
CVE-2011-4109 allows remote attackers to exploit the vulnerability by triggering a failure in policy checks.
5
Is CVE-2011-4109 a common vulnerability?
CVE-2011-4109 is a recognized vulnerability that has been documented and reported by security forums and advisories.