CVE-2011-4619: Medium severity openssl vulnerability

Q: What is the severity of CVE-2011-4619?

CVE-2011-4619 has a severity rating that indicates a denial of service vulnerability that can lead to CPU exhaustion.

Q: How do I fix CVE-2011-4619?

To fix CVE-2011-4619, upgrade to a version of OpenSSL that is 0.9.8s or 1.0.0f or later.

Q: What versions of OpenSSL are affected by CVE-2011-4619?

CVE-2011-4619 affects OpenSSL versions before 0.9.8s and 1.x versions before 1.0.0f.

Q: Can CVE-2011-4619 be exploited remotely?

Yes, CVE-2011-4619 can be exploited by remote attackers aiming to trigger a denial of service.

Q: What is the impact of CVE-2011-4619 on systems?

The impact of CVE-2011-4619 is significant as it can lead to increased CPU consumption and potentially degrade server performance.

Published Jan 6, 2012

Updated

The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.

Affected Software

64 affected components

OpenSSL OpenSSL=0.9.8b

OpenSSL OpenSSL=0.9.7l

OpenSSL OpenSSL=0.9.6i

OpenSSL OpenSSL=0.9.8m

OpenSSL OpenSSL=0.9.8c

OpenSSL OpenSSL=0.9.7c

OpenSSL OpenSSL=0.9.8n

OpenSSL OpenSSL=0.9.8p

OpenSSL OpenSSL=0.9.6d

OpenSSL OpenSSL=0.9.1c

OpenSSL OpenSSL=0.9.6

OpenSSL OpenSSL=0.9.7j

OpenSSL OpenSSL=0.9.6a

OpenSSL OpenSSL=0.9.8e

OpenSSL OpenSSL=0.9.6h-bogus

OpenSSL OpenSSL=0.9.4

OpenSSL OpenSSL=0.9.8g

OpenSSL OpenSSL=0.9.8k

OpenSSL OpenSSL=0.9.8d

OpenSSL OpenSSL=0.9.5a

OpenSSL OpenSSL=0.9.6f

OpenSSL OpenSSL=0.9.8j

OpenSSL OpenSSL=0.9.6l

OpenSSL OpenSSL=0.9.7k

OpenSSL OpenSSL=0.9.7g

OpenSSL OpenSSL<=0.9.8r

OpenSSL OpenSSL=0.9.6e

OpenSSL OpenSSL=0.9.7d

OpenSSL OpenSSL=0.9.8l

OpenSSL OpenSSL=0.9.7

OpenSSL OpenSSL=0.9.6b

OpenSSL OpenSSL=0.9.7e

OpenSSL OpenSSL=0.9.7b

OpenSSL OpenSSL=0.9.6k

OpenSSL OpenSSL=0.9.8a

OpenSSL OpenSSL=0.9.6g

OpenSSL OpenSSL=0.9.7m

OpenSSL OpenSSL=0.9.6h

OpenSSL OpenSSL=0.9.7i

OpenSSL OpenSSL=0.9.7h

OpenSSL OpenSSL=0.9.8o

OpenSSL OpenSSL=0.9.8q

OpenSSL OpenSSL=0.9.6j

OpenSSL OpenSSL=0.9.8

OpenSSL OpenSSL=0.9.7a

OpenSSL OpenSSL=0.9.6c

OpenSSL OpenSSL=0.9.6m

OpenSSL OpenSSL=0.9.8i

OpenSSL OpenSSL=0.9.8f

OpenSSL OpenSSL=0.9.8h

OpenSSL OpenSSL=0.9.2b

OpenSSL OpenSSL=0.9.5

OpenSSL OpenSSL=0.9.7f

OpenSSL OpenSSL=1.0.0c

OpenSSL OpenSSL=1.0.0-beta1

OpenSSL OpenSSL=1.0.0-beta2

OpenSSL OpenSSL=1.0.0-beta3

OpenSSL OpenSSL=1.0.0d

OpenSSL OpenSSL<=1.0.0e

OpenSSL OpenSSL=1.0.0-beta4

OpenSSL OpenSSL=1.0.0

OpenSSL OpenSSL=1.0.0-beta5

OpenSSL OpenSSL=1.0.0a

OpenSSL OpenSSL=1.0.0b

Event History

Jan 6, 2012

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-4619?

CVE-2011-4619 has a severity rating that indicates a denial of service vulnerability that can lead to CPU exhaustion.

How do I fix CVE-2011-4619?

To fix CVE-2011-4619, upgrade to a version of OpenSSL that is 0.9.8s or 1.0.0f or later.

What versions of OpenSSL are affected by CVE-2011-4619?