p PatchFirst

CVE-2011-4354

CVE-2011-4354

This page contains facts from public vulnerability sources. Check the original advisory before updating.

crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher suites, uses an incorrect modular reduction algorithm in its implementation of the P-256 and P-384 NIST elliptic curves, which allows remote attackers to obtain the private key of a TLS server via multiple handshake attempts.

EPSS 3.0% · Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openssl Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.9.8o-4squeeze3

    Update to 0.9.8o-4squeeze3

  • openssl Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.9.8o-4squeeze3

    Update to 0.9.8o-4squeeze3

  • openssl Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.9.8o-4squeeze3

    Update to 0.9.8o-4squeeze3

Original sources

Check your server →