VULNERABILITY INTELLIGENCE
CVE-2011-3210
CVSS score5 MEDIUM
EPSS probability4.56%
CISA KEVNot currently listed
Published2011-09-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.