Cloudanix VulnDB

CVE-2011-3389

None

CVSS

—

EPSS

73.3%

Published

Sep 6, 2011

CISA due date

—

The record

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.

Affected packages

Ecosystem Package Introduced Fixed
Chainguard chromium 0 0
Chainguard chromium-docker-selenium-compat 0 0
Chainguard chromium-lang 0 0
Chainguard chromium-qt 0 0
Chainguard firefox 0 0
Chainguard openjdk-11-openj9 0 0.53.0-r0
Chainguard openjdk-11-openj9-dbg 0 0.53.0-r0
Chainguard openjdk-11-openj9-default-jdk 0 0.53.0-r0
Chainguard openjdk-11-openj9-default-jvm 0 0.53.0-r0
Chainguard openjdk-11-openj9-default-policy 0 0.53.0-r0
Chainguard openjdk-11-openj9-doc 0 0.53.0-r0
Chainguard openjdk-11-openj9-jmods 0 0.53.0-r0
Chainguard openjdk-11-openj9-jre 0 0.53.0-r0
Chainguard openjdk-17-openj9 0 0.53.0-r0
Chainguard openjdk-17-openj9-dbg 0 0.53.0-r0
Chainguard openjdk-17-openj9-default-jdk 0 0.53.0-r0
Chainguard openjdk-17-openj9-default-jvm 0 0.53.0-r0
Chainguard openjdk-17-openj9-default-policy 0 0.53.0-r0
Chainguard openjdk-17-openj9-doc 0 0.53.0-r0
Chainguard openjdk-17-openj9-jmods 0 0.53.0-r0
Chainguard openjdk-17-openj9-jre 0 0.53.0-r0
Chainguard openjdk-21-openj9 0 0.53.0-r0
Chainguard openjdk-21-openj9-dbg 0 0.53.0-r0
Chainguard openjdk-21-openj9-default-jdk 0 0.53.0-r0
Chainguard openjdk-21-openj9-default-jvm 0 0.53.0-r0
Chainguard openjdk-21-openj9-default-policy 0 0.53.0-r0
Chainguard openjdk-21-openj9-doc 0 0.53.0-r0
Chainguard openjdk-21-openj9-jmods 0 0.53.0-r0
Chainguard openjdk-21-openj9-jre 0 0.53.0-r0
Chainguard openjdk-8-openj9 0 0.53.0-r1
Chainguard openjdk-8-openj9-dbg 0 0.53.0-r1
Chainguard openjdk-8-openj9-default-jdk 0 0.53.0-r1
Chainguard openjdk-8-openj9-default-jvm 0 0.53.0-r1
Chainguard openjdk-8-openj9-doc 0 0.53.0-r1
Chainguard openjdk-8-openj9-jre 0 0.53.0-r1
Debian:10 gnutls28 0 No fix
Debian:10 haskell-tls 0 No fix
Debian:11 asterisk 0 1:13.7.2~dfsg-1
Debian:11 bouncycastle 0 1.49+dfsg-1
Debian:11 curl 0 7.24.0-1
Debian:11 erlang 0 1:15.b-dfsg-1
Debian:11 gnutls28 0 No fix
Debian:11 haskell-tls 0 No fix
Debian:11 lighttpd 0 1.4.30-1
Debian:11 nss 0 3.13.1.with.ckbi.1.88-1
Debian:11 pound 0 2.6-2
Debian:11 python2.7 0 2.7.3~rc1-1
Debian:12 bouncycastle 0 1.49+dfsg-1
Debian:12 curl 0 7.24.0-1
Debian:12 erlang 0 1:15.b-dfsg-1
Debian:12 gnutls28 0 No fix
Debian:12 haskell-tls 0 No fix
Debian:12 lighttpd 0 1.4.30-1
Debian:12 nss 0 3.13.1.with.ckbi.1.88-1
Debian:13 bouncycastle 0 1.49+dfsg-1
Debian:13 curl 0 7.24.0-1
Debian:13 erlang 0 1:15.b-dfsg-1
Debian:13 gnutls28 0 No fix
Debian:13 haskell-tls 0 No fix
Debian:13 lighttpd 0 1.4.30-1
Debian:13 nss 0 3.13.1.with.ckbi.1.88-1
Debian:13 pound 0 2.6-2
Debian:5.0 curl 0 7.18.2-8lenny6
Debian:5.0 lighttpd 0 1.4.19-5+lenny3
Debian:5.0 openjdk-6 0 6b18-1.8.10-0~lenny2
Debian:6.0 curl 0 7.21.0-2.1+squeeze1
Debian:6.0 lighttpd 0 1.4.28-2+squeeze1
Debian:6.0 nss 0 3.12.8-1+squeeze11
Debian:6.0 openjdk-6 0 6b18-1.8.10-0+squeeze2
Debian:6.0 pound 0 2.6-1+deb6u1
Red Hat:enterprise_linux:5::client java-1.6.0-openjdk 0 1:1.6.0.0-1.23.1.9.10.el5_7
Red Hat:enterprise_linux:5::client java-1.6.0-openjdk-debuginfo 0 1:1.6.0.0-1.23.1.9.10.el5_7
Red Hat:enterprise_linux:5::client java-1.6.0-openjdk-demo 0 1:1.6.0.0-1.23.1.9.10.el5_7
Red Hat:enterprise_linux:5::client java-1.6.0-openjdk-devel 0 1:1.6.0.0-1.23.1.9.10.el5_7
Red Hat:enterprise_linux:5::client java-1.6.0-openjdk-javadoc 0 1:1.6.0.0-1.23.1.9.10.el5_7
Red Hat:enterprise_linux:5::client java-1.6.0-openjdk-src 0 1:1.6.0.0-1.23.1.9.10.el5_7
Red Hat:enterprise_linux:5::server java-1.6.0-openjdk 0 1:1.6.0.0-1.23.1.9.10.el5_7
Red Hat:enterprise_linux:5::server java-1.6.0-openjdk-debuginfo 0 1:1.6.0.0-1.23.1.9.10.el5_7
Red Hat:enterprise_linux:5::server java-1.6.0-openjdk-demo 0 1:1.6.0.0-1.23.1.9.10.el5_7
Red Hat:enterprise_linux:5::server java-1.6.0-openjdk-devel 0 1:1.6.0.0-1.23.1.9.10.el5_7
Red Hat:enterprise_linux:5::server java-1.6.0-openjdk-javadoc 0 1:1.6.0.0-1.23.1.9.10.el5_7
Red Hat:enterprise_linux:5::server java-1.6.0-openjdk-src 0 1:1.6.0.0-1.23.1.9.10.el5_7
Red Hat:enterprise_linux:6::server java-1.6.0-openjdk 0 1:1.6.0.0-1.40.1.9.10.el6_1
Red Hat:enterprise_linux:6::server java-1.6.0-openjdk-debuginfo 0 1:1.6.0.0-1.40.1.9.10.el6_1
Red Hat:enterprise_linux:6::server java-1.6.0-openjdk-demo 0 1:1.6.0.0-1.40.1.9.10.el6_1
Red Hat:enterprise_linux:6::server java-1.6.0-openjdk-devel 0 1:1.6.0.0-1.40.1.9.10.el6_1
Red Hat:enterprise_linux:6::server java-1.6.0-openjdk-javadoc 0 1:1.6.0.0-1.40.1.9.10.el6_1
Red Hat:enterprise_linux:6::server java-1.6.0-openjdk-src 0 1:1.6.0.0-1.40.1.9.10.el6_1
Red Hat:network_satellite:5.4::el5 java-1.6.0-ibm 0 1:1.6.0.14.0-1jpp.1.el5_9
Red Hat:network_satellite:5.4::el5 java-1.6.0-ibm-devel 0 1:1.6.0.14.0-1jpp.1.el5_9
Red Hat:network_satellite:5.4::el6 java-1.6.0-ibm 0 1:1.6.0.14.0-1jpp.1.el6_4
Red Hat:network_satellite:5.4::el6 java-1.6.0-ibm-devel 0 1:1.6.0.14.0-1jpp.1.el6_4
Red Hat:rhel_extras:4 java-1.4.2-ibm 0 0:1.4.2.13.11-1jpp.1.el4
Red Hat:rhel_extras:4 java-1.4.2-ibm-demo 0 0:1.4.2.13.11-1jpp.1.el4
Red Hat:rhel_extras:4 java-1.4.2-ibm-devel 0 0:1.4.2.13.11-1jpp.1.el4
Red Hat:rhel_extras:4 java-1.4.2-ibm-javacomm 0 0:1.4.2.13.11-1jpp.1.el4
Red Hat:rhel_extras:4 java-1.4.2-ibm-jdbc 0 0:1.4.2.13.11-1jpp.1.el4
Red Hat:rhel_extras:4 java-1.4.2-ibm-plugin 0 0:1.4.2.13.11-1jpp.1.el4
Red Hat:rhel_extras:4 java-1.4.2-ibm-src 0 0:1.4.2.13.11-1jpp.1.el4
Red Hat:rhel_extras:4 java-1.6.0-ibm 0 1:1.6.0.10.0-1jpp.2.el4
Red Hat:rhel_extras:4 java-1.6.0-ibm-demo 0 1:1.6.0.10.0-1jpp.2.el4
Red Hat:rhel_extras:4 java-1.6.0-ibm-devel 0 1:1.6.0.10.0-1jpp.2.el4
Red Hat:rhel_extras:4 java-1.6.0-ibm-javacomm 0 1:1.6.0.10.0-1jpp.2.el4
Red Hat:rhel_extras:4 java-1.6.0-ibm-jdbc 0 1:1.6.0.10.0-1jpp.2.el4
Red Hat:rhel_extras:4 java-1.6.0-ibm-plugin 0 1:1.6.0.10.0-1jpp.2.el4
Red Hat:rhel_extras:4 java-1.6.0-ibm-src 0 1:1.6.0.10.0-1jpp.2.el4
Red Hat:rhel_extras:4 java-1.6.0-sun 0 1:1.6.0.29-1jpp.1.el4
Red Hat:rhel_extras:4 java-1.6.0-sun-demo 0 1:1.6.0.29-1jpp.1.el4
Red Hat:rhel_extras:4 java-1.6.0-sun-devel 0 1:1.6.0.29-1jpp.1.el4
Red Hat:rhel_extras:4 java-1.6.0-sun-jdbc 0 1:1.6.0.29-1jpp.1.el4
Red Hat:rhel_extras:4 java-1.6.0-sun-plugin 0 1:1.6.0.29-1jpp.1.el4
Red Hat:rhel_extras:4 java-1.6.0-sun-src 0 1:1.6.0.29-1jpp.1.el4
Red Hat:rhel_extras:5::client java-1.4.2-ibm 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.4.2-ibm-demo 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.4.2-ibm-devel 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.4.2-ibm-javacomm 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.4.2-ibm-jdbc 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.4.2-ibm-plugin 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.4.2-ibm-src 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.5.0-ibm 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.5.0-ibm-accessibility 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.5.0-ibm-demo 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.5.0-ibm-devel 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.5.0-ibm-javacomm 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.5.0-ibm-jdbc 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.5.0-ibm-plugin 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.5.0-ibm-src 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.6.0-ibm 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::client java-1.6.0-ibm-accessibility 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::client java-1.6.0-ibm-demo 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::client java-1.6.0-ibm-devel 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::client java-1.6.0-ibm-javacomm 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::client java-1.6.0-ibm-jdbc 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::client java-1.6.0-ibm-plugin 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::client java-1.6.0-ibm-src 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::client java-1.6.0-sun 0 1:1.6.0.29-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.6.0-sun-demo 0 1:1.6.0.29-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.6.0-sun-devel 0 1:1.6.0.29-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.6.0-sun-jdbc 0 1:1.6.0.29-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.6.0-sun-plugin 0 1:1.6.0.29-1jpp.1.el5
Red Hat:rhel_extras:5::client java-1.6.0-sun-src 0 1:1.6.0.29-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.4.2-ibm 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.4.2-ibm-demo 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.4.2-ibm-devel 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.4.2-ibm-javacomm 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.4.2-ibm-jdbc 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.4.2-ibm-plugin 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.4.2-ibm-src 0 0:1.4.2.13.11-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.5.0-ibm 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.5.0-ibm-accessibility 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.5.0-ibm-demo 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.5.0-ibm-devel 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.5.0-ibm-javacomm 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.5.0-ibm-jdbc 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.5.0-ibm-plugin 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.5.0-ibm-src 0 1:1.5.0.13.1-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.6.0-ibm 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::server java-1.6.0-ibm-accessibility 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::server java-1.6.0-ibm-demo 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::server java-1.6.0-ibm-devel 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::server java-1.6.0-ibm-javacomm 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::server java-1.6.0-ibm-jdbc 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::server java-1.6.0-ibm-plugin 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::server java-1.6.0-ibm-src 0 1:1.6.0.10.0-1jpp.2.el5
Red Hat:rhel_extras:5::server java-1.6.0-sun 0 1:1.6.0.29-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.6.0-sun-demo 0 1:1.6.0.29-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.6.0-sun-devel 0 1:1.6.0.29-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.6.0-sun-jdbc 0 1:1.6.0.29-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.6.0-sun-plugin 0 1:1.6.0.29-1jpp.1.el5
Red Hat:rhel_extras:5::server java-1.6.0-sun-src 0 1:1.6.0.29-1jpp.1.el5
Red Hat:rhel_extras:6 java-1.5.0-ibm 0 1:1.5.0.13.1-1jpp.2.el6_2
Red Hat:rhel_extras:6 java-1.5.0-ibm-demo 0 1:1.5.0.13.1-1jpp.2.el6_2
Red Hat:rhel_extras:6 java-1.5.0-ibm-devel 0 1:1.5.0.13.1-1jpp.2.el6_2
Red Hat:rhel_extras:6 java-1.5.0-ibm-javacomm 0 1:1.5.0.13.1-1jpp.2.el6_2
Red Hat:rhel_extras:6 java-1.5.0-ibm-jdbc 0 1:1.5.0.13.1-1jpp.2.el6_2
Red Hat:rhel_extras:6 java-1.5.0-ibm-plugin 0 1:1.5.0.13.1-1jpp.2.el6_2
Red Hat:rhel_extras:6 java-1.5.0-ibm-src 0 1:1.5.0.13.1-1jpp.2.el6_2
Red Hat:rhel_extras:6 java-1.6.0-ibm 0 1:1.6.0.10.0-1jpp.2.el6
Red Hat:rhel_extras:6 java-1.6.0-ibm-demo 0 1:1.6.0.10.0-1jpp.2.el6
Red Hat:rhel_extras:6 java-1.6.0-ibm-devel 0 1:1.6.0.10.0-1jpp.2.el6
Red Hat:rhel_extras:6 java-1.6.0-ibm-javacomm 0 1:1.6.0.10.0-1jpp.2.el6
Red Hat:rhel_extras:6 java-1.6.0-ibm-jdbc 0 1:1.6.0.10.0-1jpp.2.el6
Red Hat:rhel_extras:6 java-1.6.0-ibm-plugin 0 1:1.6.0.10.0-1jpp.2.el6
Red Hat:rhel_extras:6 java-1.6.0-ibm-src 0 1:1.6.0.10.0-1jpp.2.el6
Red Hat:rhel_extras:6 java-1.6.0-sun 0 1:1.6.0.29-1jpp.1.el6
Red Hat:rhel_extras:6 java-1.6.0-sun-demo 0 1:1.6.0.29-1jpp.1.el6
Red Hat:rhel_extras:6 java-1.6.0-sun-devel 0 1:1.6.0.29-1jpp.1.el6
Red Hat:rhel_extras:6 java-1.6.0-sun-jdbc 0 1:1.6.0.29-1jpp.1.el6
Red Hat:rhel_extras:6 java-1.6.0-sun-plugin 0 1:1.6.0.29-1jpp.1.el6
Red Hat:rhel_extras:6 java-1.6.0-sun-src 0 1:1.6.0.29-1jpp.1.el6
Red Hat:rhel_extras_sap:4 java-1.4.2-ibm-sap 0 0:1.4.2.13.11.sap-1jpp.1.el4
Red Hat:rhel_extras_sap:4 java-1.4.2-ibm-sap-demo 0 0:1.4.2.13.11.sap-1jpp.1.el4
Red Hat:rhel_extras_sap:4 java-1.4.2-ibm-sap-devel 0 0:1.4.2.13.11.sap-1jpp.1.el4
Red Hat:rhel_extras_sap:4 java-1.4.2-ibm-sap-javacomm 0 0:1.4.2.13.11.sap-1jpp.1.el4
Red Hat:rhel_extras_sap:4 java-1.4.2-ibm-sap-src 0 0:1.4.2.13.11.sap-1jpp.1.el4
Red Hat:rhel_extras_sap:5 java-1.4.2-ibm-sap 0 0:1.4.2.13.11.sap-1jpp.1.el5
Red Hat:rhel_extras_sap:5 java-1.4.2-ibm-sap-demo 0 0:1.4.2.13.11.sap-1jpp.1.el5
Red Hat:rhel_extras_sap:5 java-1.4.2-ibm-sap-devel 0 0:1.4.2.13.11.sap-1jpp.1.el5
Red Hat:rhel_extras_sap:5 java-1.4.2-ibm-sap-javacomm 0 0:1.4.2.13.11.sap-1jpp.1.el5
Red Hat:rhel_extras_sap:5 java-1.4.2-ibm-sap-src 0 0:1.4.2.13.11.sap-1jpp.1.el5

Related vulnerabilities