PT-2012-1868 · Openssl · Openssl

Vincent Danen · Published 2012-01-27 · Updated 2012-11-06 · CVE-2011-4354

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8h on 32-bit platforms

Description The issue involves an incorrect modular reduction algorithm in the implementation of the P-256 and P-384 NIST elliptic curves in certain circumstances, specifically with ECDH or ECDHE cipher suites. This allows remote attackers to obtain the private key of a TLS server via multiple handshake attempts.

Recommendations For OpenSSL versions prior to 0.9.8h on 32-bit platforms, update to version 0.9.8h or later to resolve the issue.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2011-4354

DSA-2390-1

Affected Products

Openssl

References · 13

• http://debian.org/security/2012/dsa-2390 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-4354 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-4354 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-4354 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-4354 · Vendor Advisory
• http://marc.info/?t=119271238800004 · Note
• http://crypto.di.uminho.pt/CACE/CT-RSA2012-openssl-src.zip · Note
• http://cvs.openssl.org/filediff?f=openssl/crypto/bn/bn_nist.c&v1=1.14&v2=1.21 · Note
• http://rt.openssl.org/Ticket/Display.html?id=1593&user=guest&pass=guest · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4354 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=757909 · Note
• http://openwall.com/lists/oss-security/2011/12/01/6 · Note
• http://eprint.iacr.org/2011/633 · Note