NetSight
IP …
medium4.3

CVE-2011-4108

The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote …

Impact

The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.

Affected products

VendorProductAffected versions
OpensslOpenssl
through 0.9.8r
Versions 0.9.1c, 0.9.2b, 0.9.4, 0.9.5, 0.9.5a

Weakness classification

CWE-310

References