CVE-2011-4121: openssl openssl extension of ruby (git trunk) Inadequate Encryption Strength
Vulnerability summary
CVE-2011-4121 is a critical (CVSS 9.8) Inadequate Encryption Strength vulnerability in openssl openssl extension of ruby (git trunk). EPSS estimates a 2.53% chance of exploitation in the next 30 days, higher than 84.6% of scored vulnerabilities.
Timeline
- 26-11-2019PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key generation. A remote attacker could use this flaw to bypass or corrupt integrity of services, depending on strong private RSA keys generation mechanism.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.53%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.53% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Openssl1 product
- openssl extension of ruby (git trunk)versions after 2011-09-01 up to 2011-11-03
Ruby-lang1 product
- ruby≥ 1.8.7.334, < 1.9.3
2 vendors · 2 products
