Read the docs
TI-2011-02999 Aliases CVE-2011-3389GHSA-rhch-pcq2-7gp3

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft…

Priority MEDIUM 58CWE-326Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Information disclosure
Confidentiality · integrity · availability
Partial · None · None
Fix status
Partial Red Hat: 18 fixed, 3 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-326.

Summary

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.73327 99th percentileScored 2026-11-07
Fix Partial Red Hat: 7 advisoriesRed Hat: 18 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 24

CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*not specified by NVDVulnerableGoogle
cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*not specified by NVDVulnerableMozilla
cpe:2.3:a:opera:opera_browser:-:*:*:*:*:*:*:*not specified by NVDVulnerableOpera
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:siemens:simatic_rf68xr_firmware:*:*:*:*:*:*:*:*before 3.2.1VulnerableSiemens
cpe:2.3:h:siemens:simatic_rf68xr:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_rf615r_firmware:*:*:*:*:*:*:*:*before 3.2.1VulnerableSiemens
cpe:2.3:h:siemens:simatic_rf615r:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*7.10.6 – 7.23.1VulnerableHaxx
  • cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Google
  • cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Mozilla
  • cpe:2.3:a:opera:opera_browser:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Opera
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:siemens:simatic_rf68xr_firmware:*:*:*:*:*:*:*:* Versions before 3.2.1 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_rf68xr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_rf615r_firmware:*:*:*:*:*:*:*:* Versions before 3.2.1 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_rf615r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:* Versions 7.10.6 – 7.23.1 Vulnerable ·Haxx
Show 14 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*5.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:6.2:*:*:*:*:*:*:*6.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*5.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*6.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*5.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*5.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*6.0VulnerableDebian
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*10.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*10.10VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*11.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*11.10VulnerableCanonical
  • cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Debian
  • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:* Versions 10.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:* Versions 10.10 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:* Versions 11.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:* Versions 11.10 Vulnerable ·Canonical

Remediation

Red Hat 7 advisories

  • RHSA-2013:1455 Released 2013-10-23 · Red Hat rating Low
    Red Hat Network Satellite server IBM Java Runtime security update
    • Red Hat Satellite 5.4 (RHEL v.5) java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9, java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9.i386, java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el5_9 +1
    • Red Hat Satellite 5.4 (RHEL v.6) java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4, java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el6_4
  • RHSA-2012:0508 Released 2012-04-23 · Red Hat rating Critical
    java-1.5.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5.i386, java-1.5.0-ibm-accessibility-1:1.5.0.13.1-1jpp.1.el5 +11
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-demo-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-devel-1:1.5.0.13.1-1jpp.2.el6_2 +4
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-demo-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-devel-1:1.5.0.13.1-1jpp.2.el6_2 +2
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5.i386, java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5.ppc +20
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-demo-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-devel-1:1.5.0.13.1-1jpp.2.el6_2 +7
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-demo-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-devel-1:1.5.0.13.1-1jpp.2.el6_2 +4
  • RHSA-2012:0343 Released 2012-02-29 · Red Hat rating Moderate
    java-1.4.2-ibm-sap security update
    • RHEL 4 AS for SAP java-1.4.2-ibm-sap-1.4.2.13.11.sap-1jpp.1.el4, java-1.4.2-ibm-sap-demo-1.4.2.13.11.sap-1jpp.1.el4, java-1.4.2-ibm-sap-devel-1.4.2.13.11.sap-1jpp.1.el4 +2
    • RHEL 5 Server for SAP java-1.4.2-ibm-sap-1.4.2.13.11.sap-1jpp.1.el5, java-1.4.2-ibm-sap-demo-1.4.2.13.11.sap-1jpp.1.el5, java-1.4.2-ibm-sap-devel-1.4.2.13.11.sap-1jpp.1.el5 +2
Show 4 more Red Hat advisories
  • RHSA-2012:0034 Released 2012-01-18 · Red Hat rating Critical
    java-1.6.0-ibm security update
    • Red Hat Desktop version 4 Extras java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el4 +11
    • Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4.i386, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4.ppc +18
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el5, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el5.i386, java-1.6.0-ibm-accessibility-1:1.6.0.10.0-1jpp.2.el5 +13
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-devel-1:1.6.0.10.0-1jpp.2.el6 +4
    • Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el4 +11
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-devel-1:1.6.0.10.0-1jpp.2.el6 +2
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el5, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el5.i386, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el5.ppc +21
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-devel-1:1.6.0.10.0-1jpp.2.el6 +5
    • Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el4 +11
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-devel-1:1.6.0.10.0-1jpp.2.el6 +4
  • RHSA-2012:0006 Released 2012-01-09 · Red Hat rating Critical
    java-1.4.2-ibm security update
    • Red Hat Desktop version 4 Extras java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.i386, java-1.4.2-ibm-demo-1.4.2.13.11-1jpp.1.el4 +9
    • Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.ia64 +20
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el5, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el5.i386, java-1.4.2-ibm-demo-1.4.2.13.11-1jpp.1.el5 +9
    • Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.ia64 +13
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el5, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el5.i386, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el5.ia64 +20
    • Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.ia64 +13
  • RHSA-2011:1384 Released 2011-10-19 · Red Hat rating Critical
    java-1.6.0-sun security update
    • Red Hat Desktop version 4 Extras java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.29-1jpp.1.el4 +9
    • Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.29-1jpp.1.el4 +9
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.29-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.29-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.29-1jpp.1.el5 +9
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.29-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.29-1jpp.1.el6 +3
    • Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.29-1jpp.1.el4 +9
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.29-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.29-1jpp.1.el6 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.29-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.29-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.29-1jpp.1.el5 +9
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.29-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.29-1jpp.1.el6 +3
    • Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.29-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.29-1jpp.1.el4 +9
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.29-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.29-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.29-1jpp.1.el6 +3
  • RHSA-2011:1380 Released 2011-10-18 · Red Hat rating Critical
    java-1.6.0-openjdk security update
    • Red Hat Enterprise Linux (v. 5 server) java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7, java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.23.1.9.10.el5_7 +7
    • Red Hat Enterprise Linux Desktop (v. 5 client) java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7, java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.23.1.9.10.el5_7 +7
    • Red Hat Enterprise Linux Server (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1, java-1.6.0-openjdk-devel-1:1.6.0.0-1.40.1.9.10.el6_1, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.40.1.9.10.el6_1
    • Red Hat Enterprise Linux Server Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1, java-1.6.0-openjdk-demo-1:1.6.0.0-1.40.1.9.10.el6_1, java-1.6.0-openjdk-src-1:1.6.0.0-1.40.1.9.10.el6_1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 4AffectedNo fix yet
Red Hat Enterprise Linux 5AffectedNo fix yet
Red Hat Enterprise Linux 6AffectedNo fix yet
RHEL 4 AS for SAPFixed RHSA-2012:0343
RHEL 5 Server for SAPFixed RHSA-2012:0343
Red Hat Desktop version 4 ExtrasFixed RHSA-2011:1384, RHSA-2012:0006, RHSA-2012:0034
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2011:1380
Red Hat Enterprise Linux AS version 4 ExtrasFixed RHSA-2011:1384, RHSA-2012:0006, RHSA-2012:0034
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2011:1380
Red Hat Enterprise Linux Desktop Supplementary (v. 5)Fixed RHSA-2011:1384, RHSA-2012:0006, RHSA-2012:0034, RHSA-2012:0508
Red Hat Enterprise Linux Desktop Supplementary (v. 6)Fixed RHSA-2011:1384, RHSA-2012:0034, RHSA-2012:0508
Red Hat Enterprise Linux ES version 4 ExtrasFixed RHSA-2011:1384, RHSA-2012:0006, RHSA-2012:0034
Red Hat Enterprise Linux HPC Node Supplementary (v. 6)Fixed RHSA-2011:1384, RHSA-2012:0034, RHSA-2012:0508
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2011:1380
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2011:1380
Red Hat Enterprise Linux Server Supplementary (v. 5)Fixed RHSA-2011:1384, RHSA-2012:0006, RHSA-2012:0034, RHSA-2012:0508
Red Hat Enterprise Linux Server Supplementary (v. 6)Fixed RHSA-2011:1384, RHSA-2012:0034, RHSA-2012:0508
Red Hat Enterprise Linux WS version 4 ExtrasFixed RHSA-2011:1384, RHSA-2012:0006, RHSA-2012:0034
Red Hat Enterprise Linux Workstation Supplementary (v. 6)Fixed RHSA-2011:1384, RHSA-2012:0034, RHSA-2012:0508
Red Hat Satellite 5.4 (RHEL v.5)Fixed RHSA-2013:1455
Red Hat Satellite 5.4 (RHEL v.6)Fixed RHSA-2013:1455

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-3389
  2. 2026-10-03 Alias added: GHSA-rhch-pcq2-7gp3
  3. 2026-10-10 CISA SSVC decision points changed

References

Patch 3

Advisory 66

Other 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences