CVE-2011-4577: openssl Resource Management Errors
Vulnerability summary
CVE-2011-4577 is a medium (CVSS 4.3) Resource Management Errors vulnerability in openssl. EPSS estimates a 8.19% chance of exploitation in the next 30 days, higher than 94.8% of scored vulnerabilities.
Not severe (CVSS 4.3, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 5 · Related 3Timeline
- 06-01-2012PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
8.19%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
No change 0.00 pp
From 8.19% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Debian1 product
- openssl< 1.0.0f-1
Openssl1 product
- opensslEOL≤ 0.9.8r | 0.9.1c | 0.9.2b | 0.9.4 | 0.9.5 | 0.9.5a | 0.9.6 | 0.9.6a | 0.9.6b | 0.9.6c | 0.9.6d | 0.9.6e | 0.9.6f | 0.9.6g | 0.9.6h | 0.9.6h:bogus | 0.9.6i | 0.9.6j | 0.9.6k | 0.9.6l | 0.9.6m | 0.9.7 | 0.9.7a | 0.9.7b | 0.9.7c | 0.9.7d | 0.9.7e | 0.9.7f | 0.9.7g | 0.9.7h | 0.9.7i | 0.9.7j | 0.9.7k | 0.9.7l | 0.9.7m | 0.9.8 | 0.9.8a | 0.9.8b | 0.9.8c | 0.9.8d | 0.9.8e | 0.9.8f | 0.9.8g | 0.9.8h | 0.9.8i | 0.9.8j | 0.9.8k | 0.9.8l | 0.9.8m | 0.9.8n | 0.9.8o | 0.9.8p | 0.9.8q | ≤ 1.0.0e | 1.0.0 | 1.0.0:beta1 | 1.0.0:beta2 | 1.0.0:beta3 | 1.0.0:beta4 | 1.0.0:beta5 | 1.0.0a | 1.0.0b | 1.0.0c | 1.0.0d
2 vendors · 2 products
References
13 links- h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041Vendor AdvisoryX Refsource HP
- www-01.ibm.com/support/docview.wss?uid=ssg1S1004564X Refsource CONFIRM
- lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.htmlVendor AdvisoryX Refsource FEDORA
- www.openssl.org/news/secadv_20120104.txtX Refsource CONFIRM
- support.apple.com/kb/HT5784X Refsource CONFIRM
