Openssl Extension Of Ruby vulnerabilities

1 known vulnerability affecting openssl/openssl_extension_of_ruby.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2011-4121CRITICALCVSS 9.8vversions after 2011-09-01 up to 2011-11-032019-11-26

CVE-2011-4121 [CRITICAL] CWE-326 CVE-2011-4121: The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generate The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key generation. A remote attacker could use this flaw to bypass or corrupt integrity of services, depending on strong private RSA keys generation mechanism.