CVE-2011-5095: The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not proper...

Security readout for executives and security teams

CVE-2011-5095 is a weakness in OpenSSL 0.9.8 Diffie-Hellman key exchange when FIPS mode is enabled. A network man-in-the-middle could have an easier path to learning the shared secret by altering traffic. The bundle does not provide CVSS, affected CPEs, patch details, or active exploitation evidence. Exposure is most plausible where OpenSSL 0.9.8 is used with FIPS mode enabled and Diffie-Hellman key exchange is reachable. The provided affected-product metadata is empty, so confirm exposure from local software inventory and vendor package records. Handle this as targeted legacy-crypto risk discovery, not an emergency based on current evidence. If affected systems protect sensitive traffic or sit on hostile networks, prioritize remediation planning because successful key agreement compromise can undermine confidentiality. Mitigation focus: Identify systems using OpenSSL 0.9.8 with FIPS mode enabled.; Check OpenSSL, operating system, and appliance vendor guidance for fixed builds.; Prioritize replacement or vendor-approved remediation for exposed cryptographic endpoints..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.