CVE-2011-0014: ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a d...

Security readout for executives and security teams

This is an old OpenSSL TLS parsing flaw. A malformed ClientHello message can crash affected applications, and the CVE says sensitive information might also be exposed. Business risk is mainly legacy systems that still run OpenSSL 0.9.8h through 0.9.8q or 1.0.0 through 1.0.0c. Most exposure is expected in obsolete servers, appliances, embedded products, or vendor packages that still include affected OpenSSL releases. The bundle does not identify specific deployed products beyond OpenSSL version ranges and downstream vendor advisories. Treat as a legacy exposure cleanup item unless affected public-facing systems are found. If obsolete OpenSSL versions remain in production, prioritize remediation because remote crashes against TLS services can affect availability. Mitigation focus: Inventory systems using OpenSSL 0.9.8h-0.9.8q or 1.0.0-1.0.0c.; Apply OpenSSL or operating system vendor updates from trusted advisories.; Prioritize externally reachable TLS services and security appliances..

Prepared

Jun 27, 2026, 18:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.