CVE-2011-4108

EPSS 1.3%

openssl - several

Published: 1/6/2012Modified: 4/28/2026

Also known as:DEBIAN-CVE-2011-4108

Description

The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.

Affected packages (2)

Debian/opensslfrom 0, < 1.0.0f-1
Debian/opensslfrom 0, < 0.9.8g-15+lenny15

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2011-4108