CVE catalog
CVE-2011-3389
gnutls28: CVE-2011-3389
- Severity
- Medium · CVSS 5.9
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 73.33% · Oct 22, 2026
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | nss | sid | 2:3.131.1-1 | fixed |
| Debian | nss | forky | 2:3.131-1 | fixed |
| Debian | nss | trixie | 2:3.110-1+deb13u4 | fixed |
| Debian | nss | trixie-security | 2:3.110-1+deb13u4 | fixed |
| Debian | nss | bookworm | 2:3.87.1-1+deb12u2 | fixed |
| Debian | nss | bookworm-security | 2:3.87.1-1+deb12u4 | fixed |
| Debian | curl | sid | 8.23.0-1 | fixed |
| Debian | curl | forky | 8.22.0-1 | fixed |
| Debian | curl | trixie | 8.14.1-2+deb13u5 | fixed |
| Debian | curl | trixie-security | 8.14.1-2+deb13u7 | fixed |
| Debian | curl | bookworm | 7.88.1-10+deb12u15 | fixed |
| Debian | curl | bookworm-security | 7.88.1-10+deb12u5 | fixed |
| Debian | erlang | sid | 1:29.1.1+dfsg-1 | fixed |
| Debian | erlang | forky | 1:29.1.1+dfsg-1 | fixed |
| Debian | erlang | trixie | 1:27.3.4.1+dfsg-1+deb13u3 | fixed |
| Debian | erlang | trixie-security | 1:27.3.4.1+dfsg-1+deb13u4 | fixed |
| Debian | erlang | bookworm | 1:25.2.3+dfsg-1+deb12u4 | fixed |
| Debian | erlang | bookworm-security | 1:25.2.3+dfsg-1+deb12u1 | fixed |
| Debian | gnutls28 | sid | 3.8.13-1 | vulnerable |
| Debian | gnutls28 | forky | 3.8.13-1 | vulnerable |
| Debian | gnutls28 | trixie | 3.8.9-3+deb13u4 | vulnerable |
| Debian | gnutls28 | trixie-security | 3.8.9-3+deb13u4 | vulnerable |
| Debian | gnutls28 | bookworm | 3.7.9-2+deb12u7 | vulnerable |
| Debian | gnutls28 | bookworm-security | 3.7.9-2+deb12u7 | vulnerable |
| Debian | lighttpd | sid | 1.4.85-1 | fixed |
| Debian | lighttpd | forky | 1.4.85-1 | fixed |
| Debian | lighttpd | trixie | 1.4.79-2 | fixed |
| Debian | lighttpd | bookworm | 1.4.69-1 | fixed |
| Debian | haskell-tls | sid | 2.1.8-2 | vulnerable |
| Debian | haskell-tls | forky | 2.1.8-2 | vulnerable |
| Debian | haskell-tls | trixie | 1.8.0-1 | vulnerable |
| Debian | haskell-tls | bookworm | 1.5.8-1 | vulnerable |
| Debian | bouncycastle | sid | 1.86-1 | fixed |
| Debian | bouncycastle | forky | 1.86-1 | fixed |
| Debian | bouncycastle | trixie | 1.80-3 | fixed |
| Debian | bouncycastle | bookworm | 1.72-2 | fixed |
| Cpe | chrome | Not reported | Not reported | unknown |
| Cpe | internet_explorer | Not reported | Not reported | unknown |
| Cpe | firefox | Not reported | Not reported | unknown |
| Cpe | opera_browser | Not reported | Not reported | unknown |
| Cpe | windows | Not reported | Not reported | unknown |
| Cpe | simatic_rf68xr_firmware | Not reported | 3.2.1 | fixed |
| Cpe | simatic_rf615r_firmware | Not reported | 3.2.1 | fixed |
| Cpe | curl | Not reported | Not reported | unknown |
| Cpe | enterprise_linux_desktop | Not reported | Not reported | unknown |
| Cpe | enterprise_linux_eus | Not reported | Not reported | unknown |
| Cpe | enterprise_linux_server | Not reported | Not reported | unknown |
| Cpe | enterprise_linux_server_aus | Not reported | Not reported | unknown |
| Cpe | enterprise_linux_workstation | Not reported | Not reported | unknown |
| Cpe | debian_linux | Not reported | Not reported | unknown |
| Cpe | ubuntu_linux | Not reported | Not reported | unknown |
| Opensuse | python315 | tumbleweed | 3.15.0~a1-1.1 | fixed |
| Opensuse | python38 | tumbleweed | 3.8.12-1.2 | fixed |
| Opensuse | python314 | tumbleweed | 3.14.0~a1-1.1 | fixed |
| Opensuse | python3 | leap 15.1 | 3.6.10-lp151.6.7.1 | fixed |
| Opensuse | python3-base | leap 15.1 | 3.6.10-lp151.6.7.1 | fixed |
| Opensuse | python39 | tumbleweed | 3.9.7-2.1 | fixed |
| Opensuse | python312 | tumbleweed | 3.12.0a7-1.1 | fixed |
| Opensuse | python310 | tumbleweed | 3.10.0rc1-4.2 | fixed |
| Opensuse | python311 | tumbleweed | 3.11.0b1-1.1 | fixed |
| Opensuse | python313 | tumbleweed | 3.13.0~b3-1.1 | fixed |
| Suse | python3 | linux enterprise module for basesystem 15 | 3.6.10-3.42.2 | fixed |
| Suse | python3-base | linux enterprise module for basesystem 15 | 3.6.10-3.42.2 | fixed |
| Suse | python3 | linux enterprise module for basesystem 15 sp1 | 3.6.10-3.42.2 | fixed |
| Suse | python3-base | linux enterprise module for basesystem 15 sp1 | 3.6.10-3.42.2 | fixed |
| Suse | python3-base | linux enterprise module for development tools 15 | 3.6.10-3.42.2 | fixed |
| Suse | python3-base | linux enterprise module for development tools 15 sp1 | 3.6.10-3.42.2 | fixed |
| Opensuse | python36 | tumbleweed | 3.6.15-1.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | nss | source | sid | 3.13.1.with.ckbi.1.88-1 | not yet assigned | Not reported | Not reported |
| Debian | nss | source | forky | 3.13.1.with.ckbi.1.88-1 | not yet assigned | Not reported | Not reported |
| Debian | nss | source | trixie | 3.13.1.with.ckbi.1.88-1 | not yet assigned | Not reported | Not reported |
| Debian | nss | source | bookworm | 3.13.1.with.ckbi.1.88-1 | not yet assigned | Not reported | Not reported |
| Debian | curl | source | sid | 7.24.0-1 | not yet assigned | Not reported | Not reported |
| Debian | curl | source | forky | 7.24.0-1 | not yet assigned | Not reported | Not reported |
| Debian | curl | source | trixie | 7.24.0-1 | not yet assigned | Not reported | Not reported |
| Debian | curl | source | bookworm | 7.24.0-1 | not yet assigned | Not reported | Not reported |
| Debian | erlang | source | sid | 1:15.b-dfsg-1 | not yet assigned | Not reported | Not reported |
| Debian | erlang | source | forky | 1:15.b-dfsg-1 | not yet assigned | Not reported | Not reported |
| Debian | erlang | source | trixie | 1:15.b-dfsg-1 | not yet assigned | Not reported | Not reported |
| Debian | erlang | source | bookworm | 1:15.b-dfsg-1 | not yet assigned | Not reported | Not reported |
| Debian | gnutls28 | source | sid | (unfixed) | unimportant | Not reported | Not reported |
| Debian | gnutls28 | source | forky | (unfixed) | unimportant | Not reported | Not reported |
| Debian | gnutls28 | source | trixie | (unfixed) | unimportant | Not reported | Not reported |
| Debian | gnutls28 | source | bookworm | (unfixed) | unimportant | Not reported | Not reported |
| Debian | lighttpd | source | sid | 1.4.30-1 | not yet assigned | Not reported | Not reported |
| Debian | lighttpd | source | forky | 1.4.30-1 | not yet assigned | Not reported | Not reported |
| Debian | lighttpd | source | trixie | 1.4.30-1 | not yet assigned | Not reported | Not reported |
| Debian | lighttpd | source | bookworm | 1.4.30-1 | not yet assigned | Not reported | Not reported |
| Debian | haskell-tls | source | sid | (unfixed) | unimportant | Not reported | Not reported |
| Debian | haskell-tls | source | forky | (unfixed) | unimportant | Not reported | Not reported |
| Debian | haskell-tls | source | trixie | (unfixed) | unimportant | Not reported | Not reported |
| Debian | haskell-tls | source | bookworm | (unfixed) | unimportant | Not reported | Not reported |
| Debian | bouncycastle | source | sid | 1.49+dfsg-1 | not yet assigned | Not reported | Not reported |
| Debian | bouncycastle | source | forky | 1.49+dfsg-1 | not yet assigned | Not reported | Not reported |
| Debian | bouncycastle | source | trixie | 1.49+dfsg-1 | not yet assigned | Not reported | Not reported |
| Debian | bouncycastle | source | bookworm | 1.49+dfsg-1 | not yet assigned | Not reported | Not reported |
| Cpe | simatic_rf68xr_firmware | cpe | Not reported | 3.2.1 | Not reported | NVD-CVE-2011-3389 | Not reported |
| Cpe | simatic_rf615r_firmware | cpe | Not reported | 3.2.1 | Not reported | NVD-CVE-2011-3389 | Not reported |
| Opensuse | python315 | rpm | tumbleweed | 3.15.0~a1-1.1 | Not reported | OPENSUSE-SU-2025:15713-1 | Not reported |
| Opensuse | python38 | rpm | tumbleweed | 3.8.12-1.2 | Not reported | OPENSUSE-SU-2024:11285-1 | Not reported |
| Opensuse | python314 | rpm | tumbleweed | 3.14.0~a1-1.1 | Not reported | OPENSUSE-SU-2024:14434-1 | Not reported |
| Opensuse | python3 | rpm | leap 15.1 | 3.6.10-lp151.6.7.1 | Not reported | OPENSUSE-SU-2020:0086-1 | Not reported |
| Opensuse | python3-base | rpm | leap 15.1 | 3.6.10-lp151.6.7.1 | Not reported | OPENSUSE-SU-2020:0086-1 | Not reported |
| Opensuse | python39 | rpm | tumbleweed | 3.9.7-2.1 | Not reported | OPENSUSE-SU-2024:11286-1 | Not reported |
| Opensuse | python312 | rpm | tumbleweed | 3.12.0a7-1.1 | Not reported | OPENSUSE-SU-2024:12910-1 | Not reported |
| Opensuse | python310 | rpm | tumbleweed | 3.10.0rc1-4.2 | Not reported | OPENSUSE-SU-2024:11283-1 | Not reported |
| Opensuse | python311 | rpm | tumbleweed | 3.11.0b1-1.1 | Not reported | OPENSUSE-SU-2024:12089-1 | Not reported |
| Opensuse | python313 | rpm | tumbleweed | 3.13.0~b3-1.1 | Not reported | OPENSUSE-SU-2024:14109-1 | Not reported |
| Suse | python3 | rpm | linux enterprise module for basesystem 15 | 3.6.10-3.42.2 | Not reported | SUSE-SU-2020:0114-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise module for basesystem 15 | 3.6.10-3.42.2 | Not reported | SUSE-SU-2020:0114-1 | Not reported |
| Suse | python3 | rpm | linux enterprise module for basesystem 15 sp1 | 3.6.10-3.42.2 | Not reported | SUSE-SU-2020:0114-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise module for basesystem 15 sp1 | 3.6.10-3.42.2 | Not reported | SUSE-SU-2020:0114-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise module for development tools 15 | 3.6.10-3.42.2 | Not reported | SUSE-SU-2020:0114-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise module for development tools 15 sp1 | 3.6.10-3.42.2 | Not reported | SUSE-SU-2020:0114-1 | Not reported |
| Opensuse | python36 | rpm | tumbleweed | 3.6.15-1.1 | Not reported | OPENSUSE-SU-2024:11284-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [curl]Unknown
Details (6)
7.88.1-10+deb12u15· amd64 · bookwormFixed · Fixed:
7.24.0-1dsa · curl · debian · bookworm; dsa · curl · debian · 12
7.88.1-10+deb12u15· arm64 · bookwormFixed · Fixed:
7.24.0-1dsa · curl · debian · bookworm; dsa · curl · debian · 12
8.14.1-2+deb13u2~bpo13+1· amd64 · bookworm-backportsFixed · Fixed:
7.24.0-1dsa · curl · debian · bookworm; dsa · curl · debian · 12
8.14.1-2+deb13u2~bpo13+1· arm64 · bookworm-backportsFixed · Fixed:
7.24.0-1dsa · curl · debian · bookworm; dsa · curl · debian · 12
7.88.1-10+deb12u5· amd64 · bookworm-securityFixed · Fixed:
7.24.0-1dsa · curl · debian · bookworm; dsa · curl · debian · 12
7.88.1-10+deb12u5· arm64 · bookworm-securityFixed · Fixed:
7.24.0-1dsa · curl · debian · bookworm; dsa · curl · debian · 12
- [erlang]Unknown
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-asn1]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-base]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-common-test]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-crypto]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-debugger]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-dev]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-dialyzer]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-diameter]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-doc]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-edoc]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-eldap]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-erl-docgen]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-et]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-eunit]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-examples]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-ftp]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-inets]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
- [erlang-jinterface]Unknown
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityFixed · Fixed:
1:15.b-dfsg-1dsa · erlang · debian · bookworm; dsa · erlang · debian · 12
Observed:
References
- [https://access.redhat.com/errata/RHSA-2011:1384]
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15713-1.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2011-3389]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2011-3389]
- [https://osv.dev/vulnerability/DLA-154-1]
- [https://osv.dev/vulnerability/DSA-2356-1]
- [https://osv.dev/vulnerability/DSA-2358-1]
- [https://osv.dev/vulnerability/DSA-2368-1]
- [https://osv.dev/vulnerability/DSA-2398-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:0114-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2020:0086-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11283-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11284-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11285-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11286-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:12089-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:12910-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:14109-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:14434-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:15713-1]
- [https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsma-18-058-02.json]
- [https://security-tracker.debian.org/tracker/CVE-2011-3389]
- [https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1435.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]