Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-4109

high · 9.3

Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.

9.3
CVSS
16.9%
EPSS (exploit prob.)
97th
EPSS percentile
2012-01-06
Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
opensslopenssl0.9.8
opensslopenssl0.9.8a
opensslopenssl0.9.8b
opensslopenssl0.9.8c
opensslopenssl0.9.8d
opensslopenssl0.9.8e
opensslopenssl0.9.8f
opensslopenssl0.9.8g
opensslopenssl0.9.8h
opensslopenssl0.9.8i
opensslopenssl0.9.8j
opensslopenssl0.9.8k
opensslopenssl0.9.8l
opensslopenssl0.9.8m
opensslopenssl0.9.8n
opensslopenssl0.9.8o
opensslopenssl0.9.8p
opensslopenssl0.9.8q
opensslopenssl0.9.8r

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-4109