CVE-2011-1945
CVE-2011-1945
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) is used for the ECDHE_ECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine private keys via a timing attack and a lattice calculation.
EPSS 3,3% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · network
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
openssl Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.0e-1
Actualiza a 1.0.0e-1
openssl Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.0e-1
Actualiza a 1.0.0e-1
openssl Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.0e-1
Actualiza a 1.0.0e-1
Fuentes originales
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:136
- http://www.kb.cert.org/vuls/id/MAPG-8FENZ3
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:137
- http://www.debian.org/security/2011/dsa-2309
- http://support.apple.com/kb/HT5784
- http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
- https://hermes.opensuse.org/messages/8760466
- http://www.kb.cert.org/vuls/id/536044
- https://hermes.opensuse.org/messages/8764170
- http://secunia.com/advisories/44935
- http://eprint.iacr.org/2011/232.pdf
- https://nvd.nist.gov/vuln/detail/CVE-2011-1945