DEBIAN-CVE-2011-4576

DEBIAN-CVE-2011-4576 PUBLISHED CVSS 8.699999809265137 HIGH

The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.

Risk Scores

CVSS v4.0

8.699999809265137

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Debian:11	openssl	0, 0, 0
Debian:14	openssl	0, 0, 0
Debian:12	openssl	0, 0, 0
Debian:13	openssl	0, 0, 0

Timeline

Jan 6, 2012 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2011-4576 advisory

Open in Interactive Console →