CVE-2011-3389
Fixed in a distro release EPSS 73%
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
Products: google chrome, microsoft internet_explorer, mozilla firefox, opera_browser, microsoft windows, siemens simatic_rf68xr_firmware, siemens simatic_rf615r_firmware, haxx curl, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_workstation, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | chromium | 0 |
| Chainguard | firefox | 0 |
| Chainguard | openjdk-11-openj9-default-policy | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-policy | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-policy | 0.53.0-r0 |
| Chainguard | openjdk-25-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0.53.0-r1 |
| Debian 12 | bouncycastle | 1.49+dfsg-1 |
| Debian 12 | curl | 7.24.0-1 |
| Debian 12 | erlang | 1:15.b-dfsg-1 |
| Debian 12 | gnutls28 | no fix |
| Debian 12 | haskell-tls | no fix |
| Debian 12 | lighttpd | 1.4.30-1 |
| Debian 12 | nss | 3.13.1.with.ckbi.1.88-1 |
| Debian 13 | bouncycastle | 1.49+dfsg-1 |
| Debian 13 | curl | 7.24.0-1 |
| Debian 13 | erlang | 1:15.b-dfsg-1 |
| Debian 13 | gnutls28 | no fix |
| Debian 13 | haskell-tls | no fix |
| Debian 13 | lighttpd | 1.4.30-1 |
| Debian 13 | nss | 3.13.1.with.ckbi.1.88-1 |
| Debian 13 | pound | 2.6-2 |
| Debian 14 | asterisk | 1:13.7.2~dfsg-1 |
| Debian 14 | bouncycastle | 1.49+dfsg-1 |
| Debian 14 | curl | 7.24.0-1 |
| Debian 14 | erlang | 1:15.b-dfsg-1 |
| Debian 14 | gnutls28 | no fix |
| Debian 14 | haskell-tls | no fix |
| Debian 14 | lighttpd | 1.4.30-1 |
| Debian 14 | nss | 3.13.1.with.ckbi.1.88-1 |
| Debian 14 | pound | 2.6-2 |
| Debian 5.0 | curl | 7.18.2-8lenny6 |
| Debian 5.0 | lighttpd | 1.4.19-5+lenny3 |
| Debian 5.0 | openjdk-6 | 6b18-1.8.10-0~lenny2 |
| Debian 6.0 | curl | 7.21.0-2.1+squeeze1 |
| Debian 6.0 | lighttpd | 1.4.28-2+squeeze1 |
| Debian 6.0 | nss | 3.12.8-1+squeeze11 |
| Debian 6.0 | openjdk-6 | 6b18-1.8.10-0+squeeze2 |
| Debian 6.0 | pound | 2.6-1+deb6u1 |
| Red Hat Enterprise Linux 5 | java-1.6.0-openjdk | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat Enterprise Linux 5 | java-1.6.0-openjdk-debuginfo | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat Enterprise Linux 5 | java-1.6.0-openjdk-demo | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat Enterprise Linux 5 | java-1.6.0-openjdk-devel | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat Enterprise Linux 5 | java-1.6.0-openjdk-javadoc | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat Enterprise Linux 5 | java-1.6.0-openjdk-src | 1:1.6.0.0-1.23.1.9.10.el5_7 |
| Red Hat Enterprise Linux 6 | java-1.6.0-openjdk | 1:1.6.0.0-1.40.1.9.10.el6_1 |
| Red Hat Enterprise Linux 6 | java-1.6.0-openjdk-debuginfo | 1:1.6.0.0-1.40.1.9.10.el6_1 |
| Red Hat Enterprise Linux 6 | java-1.6.0-openjdk-demo | 1:1.6.0.0-1.40.1.9.10.el6_1 |
| Red Hat Enterprise Linux 6 | java-1.6.0-openjdk-devel | 1:1.6.0.0-1.40.1.9.10.el6_1 |
| Red Hat Enterprise Linux 6 | java-1.6.0-openjdk-javadoc | 1:1.6.0.0-1.40.1.9.10.el6_1 |
| Red Hat Enterprise Linux 6 | java-1.6.0-openjdk-src | 1:1.6.0.0-1.40.1.9.10.el6_1 |
| Red Hat network satellite 5.4 | java-1.6.0-ibm | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat network satellite 5.4 | java-1.6.0-ibm | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat network satellite 5.4 | java-1.6.0-ibm-devel | 1:1.6.0.14.0-1jpp.1.el5_9 |
| Red Hat network satellite 5.4 | java-1.6.0-ibm-devel | 1:1.6.0.14.0-1jpp.1.el6_4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm | 0:1.4.2.13.11-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm-demo | 0:1.4.2.13.11-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm-devel | 0:1.4.2.13.11-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm-javacomm | 0:1.4.2.13.11-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm-jdbc | 0:1.4.2.13.11-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm-plugin | 0:1.4.2.13.11-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.4.2-ibm-src | 0:1.4.2.13.11-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.6.0-ibm | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.6.0-ibm-demo | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.6.0-ibm-devel | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.6.0-ibm-javacomm | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.6.0-ibm-jdbc | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.6.0-ibm-plugin | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.6.0-ibm-src | 1:1.6.0.10.0-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.6.0-sun | 1:1.6.0.29-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.6.0-sun-demo | 1:1.6.0.29-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.6.0-sun-devel | 1:1.6.0.29-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.6.0-sun-jdbc | 1:1.6.0.29-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.6.0-sun-plugin | 1:1.6.0.29-1jpp.1.el4 |
| Red Hat rhel extras 4 | java-1.6.0-sun-src | 1:1.6.0.29-1jpp.1.el4 |
| Red Hat rhel extras 5 | java-1.4.2-ibm | 0:1.4.2.13.11-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm-demo | 0:1.4.2.13.11-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm-devel | 0:1.4.2.13.11-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm-javacomm | 0:1.4.2.13.11-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm-jdbc | 0:1.4.2.13.11-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm-plugin | 0:1.4.2.13.11-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.4.2-ibm-src | 0:1.4.2.13.11-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm | 1:1.5.0.13.1-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-accessibility | 1:1.5.0.13.1-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-demo | 1:1.5.0.13.1-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-devel | 1:1.5.0.13.1-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-javacomm | 1:1.5.0.13.1-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-jdbc | 1:1.5.0.13.1-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-plugin | 1:1.5.0.13.1-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-src | 1:1.5.0.13.1-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-accessibility | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-demo | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-devel | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-javacomm | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-jdbc | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-plugin | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-src | 1:1.6.0.10.0-1jpp.2.el5 |
| Red Hat rhel extras 5 | java-1.6.0-sun | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-sun-demo | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-sun-devel | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-sun-jdbc | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-sun-plugin | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-sun-src | 1:1.6.0.29-1jpp.1.el5 |
| Red Hat rhel extras 6 | java-1.5.0-ibm | 1:1.5.0.13.1-1jpp.2.el6_2 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-demo | 1:1.5.0.13.1-1jpp.2.el6_2 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-devel | 1:1.5.0.13.1-1jpp.2.el6_2 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-javacomm | 1:1.5.0.13.1-1jpp.2.el6_2 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-jdbc | 1:1.5.0.13.1-1jpp.2.el6_2 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-plugin | 1:1.5.0.13.1-1jpp.2.el6_2 |
| Red Hat rhel extras 6 | java-1.5.0-ibm-src | 1:1.5.0.13.1-1jpp.2.el6_2 |
| Red Hat rhel extras 6 | java-1.6.0-ibm | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-demo | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-devel | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-javacomm | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-jdbc | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-plugin | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-src | 1:1.6.0.10.0-1jpp.2.el6 |
| Red Hat rhel extras 6 | java-1.6.0-sun | 1:1.6.0.29-1jpp.1.el6 |
| Red Hat rhel extras 6 | java-1.6.0-sun-demo | 1:1.6.0.29-1jpp.1.el6 |
| Red Hat rhel extras 6 | java-1.6.0-sun-devel | 1:1.6.0.29-1jpp.1.el6 |
| Red Hat rhel extras 6 | java-1.6.0-sun-jdbc | 1:1.6.0.29-1jpp.1.el6 |
| Red Hat rhel extras 6 | java-1.6.0-sun-plugin | 1:1.6.0.29-1jpp.1.el6 |
| Red Hat rhel extras 6 | java-1.6.0-sun-src | 1:1.6.0.29-1jpp.1.el6 |
| Red Hat rhel extras sap 4 | java-1.4.2-ibm-sap | 0:1.4.2.13.11.sap-1jpp.1.el4 |
| Red Hat rhel extras sap 4 | java-1.4.2-ibm-sap-demo | 0:1.4.2.13.11.sap-1jpp.1.el4 |
| Red Hat rhel extras sap 4 | java-1.4.2-ibm-sap-devel | 0:1.4.2.13.11.sap-1jpp.1.el4 |
| Red Hat rhel extras sap 4 | java-1.4.2-ibm-sap-javacomm | 0:1.4.2.13.11.sap-1jpp.1.el4 |
| Red Hat rhel extras sap 4 | java-1.4.2-ibm-sap-src | 0:1.4.2.13.11.sap-1jpp.1.el4 |
| Red Hat rhel extras sap 5 | java-1.4.2-ibm-sap | 0:1.4.2.13.11.sap-1jpp.1.el5 |
| Red Hat rhel extras sap 5 | java-1.4.2-ibm-sap-demo | 0:1.4.2.13.11.sap-1jpp.1.el5 |
| Red Hat rhel extras sap 5 | java-1.4.2-ibm-sap-devel | 0:1.4.2.13.11.sap-1jpp.1.el5 |
| Red Hat rhel extras sap 5 | java-1.4.2-ibm-sap-javacomm | 0:1.4.2.13.11.sap-1jpp.1.el5 |
| Red Hat rhel extras sap 5 | java-1.4.2-ibm-sap-src | 0:1.4.2.13.11.sap-1jpp.1.el5 |
| SUSE Linux Enterprise Module for Basesystem 15 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | python-base | 2.7.17-7.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | python3 | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python-base | 2.7.17-7.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python3 | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Development Tools 15 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Python 2 15 SP1 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Python 2 15 SP1 | python-base | 2.7.17-7.32.1 |
| Wolfi | chromium | 0 |
| Wolfi | firefox | 0 |
| openSUSE Leap 15.1 | python3 | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-base | 3.6.10-lp151.6.7.1 |
| openSUSE Tumbleweed | fetchmail | 6.3.26-13.4 |
| openSUSE Tumbleweed | mozilla-nss | 3.26.2-1.1 |
| openSUSE Tumbleweed | python | 2.7.18-8.1 |
| openSUSE Tumbleweed | python-base | 2.7.12-1.4 |
| openSUSE Tumbleweed | python310 | 3.10.0rc1-4.2 |
| openSUSE Tumbleweed | python311 | 3.11.0b1-1.1 |
| openSUSE Tumbleweed | python312 | 3.12.0a7-1.1 |
| openSUSE Tumbleweed | python313 | 3.13.0~b3-1.1 |
| openSUSE Tumbleweed | python314 | 3.14.0~a1-1.1 |
| openSUSE Tumbleweed | python315 | 3.15.0~a1-1.1 |
| openSUSE Tumbleweed | python36 | 3.6.15-1.1 |
| openSUSE Tumbleweed | python38 | 3.8.12-1.2 |
| openSUSE Tumbleweed | python39 | 3.9.7-2.1 |