CVE-2011-4577: OpenSSL

Medium severity, CVSS 4.3. EPSS: 8.2% chance of exploitation in the next 30 days.

OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.

Affected products

• OpenSSL OpenSSL: up to and including 0.9.8r; version 0.9.1c only; version 0.9.2b only; version 0.9.4 only; version 0.9.5 only; version 0.9.5a only; …

Published 2012-01-06. Last modified 2026-06-16.