CVE-2011-5094
published 2012-06-16CVE-2011-5094: Mozilla Network Security Services (NSS) 3.x, with certain settings of the SSL_ENABLE_RENEGOTIATION option, does not properly restrict client-initiated…
PriorityP420medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
2.71%
84.3th percentile
Mozilla Network Security Services (NSS) 3.x, with certain settings of the SSL_ENABLE_RENEGOTIATION option, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-1473. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment
Affected
35 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| mozilla | network_security_services | — | — |
| openssl | openssl | <= 0.9.8k | — |
| openssl | openssl | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-m896-wg3p-7ffv: ** DISPUTED ** Mozilla Network Security Services (NSS) 3
ghsa_unreviewed·2022-05-17·CVSS 5.0
CVE-2011-5094 [MEDIUM] GHSA-m896-wg3p-7ffv: ** DISPUTED ** Mozilla Network Security Services (NSS) 3
** DISPUTED ** Mozilla Network Security Services (NSS) 3.x, with certain settings of the SSL_ENABLE_RENEGOTIATION option, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-1473. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment.
GHSA
GHSA-5wj2-7gqw-v6cm: ** DISPUTED ** OpenSSL before 0
ghsa_unreviewed·2022-05-13·CVSS 4.3
CVE-2011-1473 [MEDIUM] GHSA-5wj2-7gqw-v6cm: ** DISPUTED ** OpenSSL before 0
** DISPUTED ** OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment.
Red Hat
nss: DoS via repeated SSL session renegotiations
vendor_redhat·2011-03-13·CVSS 5.0
CVE-2011-5094 [MEDIUM] nss: DoS via repeated SSL session renegotiations
nss: DoS via repeated SSL session renegotiations
Mozilla Network Security Services (NSS) 3.x, with certain settings of the SSL_ENABLE_RENEGOTIATION option, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-1473. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment
Package: nss (Red Hat Enterprise Linux 4) - Will not fix
Package: nss (Red Hat Enterprise Linux 5) - Will not fix
Package: nss (Red Hat Enterprise Linu
Red Hat
openssl: DoS via repeated SSL session renegotiations
vendor_redhat·2011-03-13·CVSS 5.0
CVE-2011-1473 [MEDIUM] openssl: DoS via repeated SSL session renegotiations
openssl: DoS via repeated SSL session renegotiations
OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment
Package: openssl (Red Hat Enterprise Linux 4) - Will not fix
Package: openssl096b (Red Hat Enterprise Linux 4) - Will not fix
Package: openssl (Red Hat Enterprise Linux 5) - Will not fix
Package: openssl097
No detection rules found.
No public exploits indexed.
Bugzilla
Mozilla NSS TLS 1.3 CCS Flood remote DoS Attack
bugzilla·2020-05-28
Mozilla NSS TLS 1.3 CCS Flood remote DoS Attack
Mozilla NSS TLS 1.3 CCS Flood remote DoS Attack
Created attachment 9152323
PoC
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
Steps to reproduce:
Step 1. Checkout the latest version of NSS code and build it. Revision ID: 661e3e3f6ba515a36fc97038164979a216c9f87b
Step 2. Run ssl_gtests.sh test to create the data selfserv tool needed.
```shell
HOST=localhost DOMSUF=localdomain USE_64=1 ./nss/tests/ssl_gtests/ssl_gtests.sh
```
Step 3. Run slefserv in TLS 1.3 mode.
```shell
NSS_DIR="$(pwd)/dist/$(cat dist/latest)"
LD_LIBRARY_PATH="$NSS_DIR/lib" "$NSS_DIR/bin/selfserv" -n rsa -p 4433 -d ~/nss-dev/tests_results/security/localhost.1/ssl_gtests/ -v -V tls1.3:tls1.3
```
Step 4. Config environment for PoC (
Bugzilla
CVE-2011-5094 nss: DoS via repeated SSL session renegotiations
bugzilla·2012-06-18·CVSS 5.0
CVE-2011-5094 [MEDIUM] CVE-2011-5094 nss: DoS via repeated SSL session renegotiations
CVE-2011-5094 nss: DoS via repeated SSL session renegotiations
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5094
Assigned: 20120616
Reference: URL: http://www.openwall.com/lists/oss-security/2011/07/08/2
Reference: URL: http://www.ietf.org/mail-archive/web/tls/current/msg07564.html
Reference: URL: http://www.ietf.org/mail-archive/web/tls/current/msg07567.html
Reference: URL: http://www.ietf.org/mail-archive/web/tls/current/msg07553.html
Reference: URL: http://www.ietf.org/mail-archive/web/tls/current/msg07576.html
Reference: URL: http://www.ietf.org/mail-archive/web/tls/current/msg07577.html
Reference: MISC: http://orchilles.com/2011/03/ssl-renegotiation-dos.html
Reference: MISC: http://vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.html
Reference: MISC: http://www.educa
Bugzilla
CVE-2011-1473 openssl: DoS via repeated SSL session renegotiations
bugzilla·2011-05-23·CVSS 5.0
CVE-2011-1473 [MEDIUM] CVE-2011-1473 openssl: DoS via repeated SSL session renegotiations
CVE-2011-1473 openssl: DoS via repeated SSL session renegotiations
It was reported [1] that a flaw exists in how openSSL handles SSL renegotiation. Because of the processing power required to handle an SSL/TLS handshake, with renegotiation enabled, a user can send multiple handshakes per second due to the renegotiation request being permitted. This could allow a malicious user to send multiple renegotiation requests and exhaust server resources.
Note that this is not the only way to cause a denial of service on an SSL-enabled service; there are many other ways to accomplish the same thing, this just makes it easier.
What makes this bug even more confusing is that this report is recent, with a 2011 CVE, however the recommended fix in the report is to upgrade to OpenSSL 0.9.8l, which is w
http://orchilles.com/2011/03/ssl-renegotiation-dos.htmlhttp://vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.htmlhttp://www.educatedguesswork.org/2011/10/ssltls_and_computational_dos.htmlhttp://www.ietf.org/mail-archive/web/tls/current/msg07553.htmlhttp://www.ietf.org/mail-archive/web/tls/current/msg07564.htmlhttp://www.ietf.org/mail-archive/web/tls/current/msg07567.htmlhttp://www.ietf.org/mail-archive/web/tls/current/msg07576.htmlhttp://www.ietf.org/mail-archive/web/tls/current/msg07577.htmlhttp://www.openwall.com/lists/oss-security/2011/07/08/2https://bugzilla.redhat.com/show_bug.cgi?id=707065http://orchilles.com/2011/03/ssl-renegotiation-dos.htmlhttp://vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.htmlhttp://www.educatedguesswork.org/2011/10/ssltls_and_computational_dos.htmlhttp://www.ietf.org/mail-archive/web/tls/current/msg07553.htmlhttp://www.ietf.org/mail-archive/web/tls/current/msg07564.htmlhttp://www.ietf.org/mail-archive/web/tls/current/msg07567.htmlhttp://www.ietf.org/mail-archive/web/tls/current/msg07576.htmlhttp://www.ietf.org/mail-archive/web/tls/current/msg07577.htmlhttp://www.openwall.com/lists/oss-security/2011/07/08/2https://bugzilla.redhat.com/show_bug.cgi?id=707065
2012-06-16
Published