Vulnerability
CVE-2011-5095
CVE-2011-5095 is a medium-severity vulnerability (CVSS v2 4.0). As of 2026-11-04, 200 hosts in our data show software it affects on an open service in at least 15 countries.
The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923.
- Published
- 2012-06-20
- Last modified
- 2026-06-16
- CVSS score
- 4.0 CVSS v2
- CVSS vector (v2)
- AV:N/AC:H/Au:N/C:P/I:P/A:N
- Exploit likelihood (EPSS)
- 2.1% in the next 30 days (top 19% of CVEs)
Exposure in our data
200 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 145 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).
1 more host had it earlier (the software version has since changed or the service is gone).
Counted 2026-11-04 04:20 UTC
By country
| China CN | 52 |
| United States US | 32 |
| Japan JP | 27 |
| Hong Kong HK | 13 |
| Germany DE | 10 |
| France FR | 9 |
| Indonesia ID | 7 |
| Italy IT | 5 |
| South Korea KR | 5 |
| Russia RU | 5 |
| United Kingdom GB | 4 |
| Taiwan TW | 4 |
| Portugal PT | 3 |
| Singapore SG | 3 |
| Austria AT | 2 |
Affected software seen
| openssl 0.9.8 | 200 |