Back to Database
Status published
Critical
CVE-2011-4121
The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01...
Vulnerability Description
The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key generation. A remote attacker could use this flaw to bypass or corrupt integrity of services, depending on strong private RSA keys generation mechanism.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-4121
Credits & Attribution
No credits recorded in the NVD database.
References
More from OpenSSL
View All →CVE-2025-9232
Out-of-bounds read in HTTP client no_proxy handling
Unknown
0
CVE-2025-9231
Timing side-channel in SM2 algorithm on 64 bit ARM
Unknown
0
CVE-2025-9230
Out-of-bounds read & write in RFC 3211 KEK Unwrap
Unknown
0
CVE-2025-69421
NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
Unknown
0
CVE-2025-69420
Missing ASN1_TYPE validation in TS_RESP_verify_response() function
Unknown
0
Affected Vendor
OpenSSL
View all reports →Affected Software
OpenSSL extension of Ruby (Git trunk)
Vulnerable Versions:
versions after 2011-09-01 up to 2011-11-03
Timeline
Official Publish:
November 26th, 2019
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.