CVEvulnerability

CVE-2011-4109

9.3 HIGH Published 2012-01-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-01-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-399

Description

Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.

Affected configurations

• openssl openssl 0.9.8 • openssl openssl 0.9.8a • openssl openssl 0.9.8b • openssl openssl 0.9.8c • openssl openssl 0.9.8d • openssl openssl 0.9.8e • openssl openssl 0.9.8f • openssl openssl 0.9.8g • openssl openssl 0.9.8h • openssl openssl 0.9.8i • openssl openssl 0.9.8j • openssl openssl 0.9.8k • openssl openssl 0.9.8l • openssl openssl 0.9.8m • openssl openssl 0.9.8n • openssl openssl 0.9.8o • openssl openssl 0.9.8p • openssl openssl 0.9.8q • openssl openssl 0.9.8r

Related

Weakness · not in database (1)

References