CVE-2011-2940 stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
HighCVSS 9.3
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/stunnel4(Debian:12) | < 3:4.42-1 | 3:4.42-1 |
| debian/stunnel4(Debian:13) | < 3:4.42-1 | 3:4.42-1 |
| stunnel | = 4.40 | No fix listed |
| stunnel | = 4.41 | No fix listed |
References
- Debian Security Tracker CVE-2011-2940 vendor-advisory
- 45705 third-party-advisory vendor-advisory
- 1025959 vdb-entry
- stunnel.org
- [oss-security] 20110819 Re: CVE request: stunnel 4.4x heap overflow flaw mailing-list
- [oss-security] 20110819 CVE request: stunnel 4.4x heap overflow flaw mailing-list
- 74600 vdb-entry
- 49254 vdb-entry
- [stunnel-announce] 20110818 stunnel 4.42 released mailing-list
- bugzilla.redhat.com
- stunnel-unspecifed-code-execution(69318) vdb-entry
- bugs.debian.org issue-tracking