---
title: "CVE-2011-1473: OpenSSL before 0.9.8l, and 0.9.8m… | CubePath"
description: "OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols…"
language: en
source: https://cubepath.com/security/cve/CVE-2011-1473
---

# CVE-2011-1473: OpenSSL before 0.9.8l, and 0.9.8m… | CubePath

## Description

OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094\. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment

Official description from the CVE record, published by mitre. Copyright © 1999-2026 The MITRE Corporation. See [/security/cve/legal](https://cubepath.com/security/cve/legal) for the CVE license. [View the record on cve.org](https://www.cve.org/CVERecord?id=CVE-2011-1473)

## Key data

### EPSS

Exploit Prediction Scoring System by FIRST: an estimate of the probability that exploitation activity will be observed in the next 30 days.

Score

0.66873 (66.9% probability)

Percentile

99.3%

Scores of

Nov 10, 2026

Model

v2026.06.15

## References

Links listed in the CVE record. They lead to other sites, which CubePath does not control.

- [vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.html](http://vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.html)
- [\[tls\] 20110315 Re: SSL Renegotiation DOS](http://www.ietf.org/mail-archive/web/tls/current/msg07567.html)  (ietf.org) mailing-list
- [\[tls\] 20110318 Re: SSL Renegotiation DOS](http://www.ietf.org/mail-archive/web/tls/current/msg07577.html)  (ietf.org) mailing-list
- [bugzilla.redhat.com/show\_bug.cgi?id=707065](https://bugzilla.redhat.com/show%5Fbug.cgi?id=707065)
- [20140214 ESA-2014-009: RSA BSAFE SSL-J Multiple Vulnerabilities](http://archives.neohapsis.com/archives/bugtraq/2014-02/0061.html)  (archives.neohapsis.com) mailing-list
- [educatedguesswork.org/2011/10/ssltls\_and\_computational\_dos.…](http://www.educatedguesswork.org/2011/10/ssltls%5Fand%5Fcomputational%5Fdos.html)
- [\[oss-security\] 20110708 SSL renegotiation DoS CVE-2011-1473](http://www.openwall.com/lists/oss-security/2011/07/08/2)  (openwall.com) mailing-list
- [SSRT100852](http://marc.info/?l=bugtraq&m=133951357207000&w=2)  (marc.info) vendor-advisory
- [\[tls\] 20110318 Re: SSL Renegotiation DOS](http://www.ietf.org/mail-archive/web/tls/current/msg07576.html)  (ietf.org) mailing-list
- [orchilles.com/2011/03/ssl-renegotiation-dos.html](http://orchilles.com/2011/03/ssl-renegotiation-dos.html)
- [\[tls\] 20110315 SSL Renegotiation DOS](http://www.ietf.org/mail-archive/web/tls/current/msg07553.html)  (ietf.org) mailing-list
- [\[tls\] 20110315 Re: SSL Renegotiation DOS](http://www.ietf.org/mail-archive/web/tls/current/msg07564.html)  (ietf.org) mailing-list
- [\[rocketmq-dev\] 20190527 \[GitHub\] \[rocketmq\] bix29 opened a new issue #1233: TLS Client-initiated renegotiation attack (CVE-2011-1473)](https://lists.apache.org/thread.html/142b93d261e8ac7c5ceffdce848d622404abc1c286bbc999f43a9e10%40%3Cdev.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list
- [\[rocketmq-dev\] 20190801 \[GitHub\] \[rocketmq\] duhenglucky commented on issue #1233: TLS Client-initiated renegotiation attack (CVE-2011-1473)](https://lists.apache.org/thread.html/6121becfdd23f9aeb675d5db80616536277d5931d6cde9dca292e509%40%3Cdev.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list
- [\[rocketmq-dev\] 20191024 \[GitHub\] \[rocketmq\] Journey-x commented on issue #1233: TLS Client-initiated renegotiation attack (CVE-2011-1473)](https://lists.apache.org/thread.html/8be38d35654441140db8eb3f7433524b3653ac3fdc26e2fa94626a3a%40%3Cdev.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list
- [\[rocketmq-dev\] 20200305 \[GitHub\] \[rocketmq\] ShadowySpirits commented on issue #1233: TLS Client-initiated renegotiation attack (CVE-2011-1473)](https://lists.apache.org/thread.html/r1e33410bb5c81536e7fe14b51fa83e7bfd9445db61fd10c134792bde%40%3Cdev.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list
- [\[rocketmq-dev\] 20200305 \[GitHub\] \[rocketmq\] coveralls commented on issue #1820: \[ISSUE #1233\] Fix CVE-2011-1473](https://lists.apache.org/thread.html/r298a09a2b98446b27217d719e877c643b6d13fac0bcafe04696a446b%40%3Cdev.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list
- [\[rocketmq-dev\] 20200305 \[GitHub\] \[rocketmq\] ShadowySpirits opened a new pull request #1820: \[ISSUE #1233\] Fix CVE-2011-1473](https://lists.apache.org/thread.html/r77fe575893261889b983e067293be72fa1f8c6305ede9fdbc404c514%40%3Cdev.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list
- [\[rocketmq-dev\] 20210311 \[GitHub\] \[rocketmq\] vongosling closed issue #1233: TLS Client-initiated renegotiation attack (CVE-2011-1473)](https://lists.apache.org/thread.html/r5e595b91f00613dafa635852121d45b161e8b5c3eba4551aeccc6483%40%3Cdev.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list
- [\[rocketmq-commits\] 20210311 \[rocketmq\] branch develop updated: \[ISSUE #1233\] Fix CVE-2011-1473](https://lists.apache.org/thread.html/r3822ad69442291562c2ab41132fc49780d269e8b52deb458b7060f6d%40%3Ccommits.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list
- [\[rocketmq-dev\] 20210311 \[GitHub\] \[rocketmq\] vongosling merged pull request #1820: \[ISSUE #1233\] Fix CVE-2011-1473](https://lists.apache.org/thread.html/r8680f41bcdad13c3f267cb868b45e5fb1f57df8b39d25193f7d66500%40%3Cdev.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list
- [\[rocketmq-dev\] 20210311 \[GitHub\] \[rocketmq\] mouzz commented on pull request #1820: \[ISSUE #1233\] Fix CVE-2011-1473](https://lists.apache.org/thread.html/ra95c355827b3c96c8013ed8e0666c851581651be2524f3d28cd4fe71%40%3Cdev.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list
- [\[rocketmq-dev\] 20210327 \[GitHub\] \[rocketmq\] liufeiguo commented on pull request #1820: \[ISSUE #1233\] Fix CVE-2011-1473](https://lists.apache.org/thread.html/r13a07a09f98b2841193dbf17a47c7f09b464e0747a1d3e7298ad4c81%40%3Cdev.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list
- [\[rocketmq-dev\] 20210420 \[GitHub\] \[rocketmq\] mouzz commented on pull request #1820: \[ISSUE #1233\] Fix CVE-2011-1473](https://lists.apache.org/thread.html/rf9e8ae0356af3ec4f7780ca651b770721d287d4d55f62f4f754e0a6f%40%3Cdev.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list
- [\[rocketmq-dev\] 20210420 \[GitHub\] \[rocketmq\] mouzz removed a comment on pull request #1820: \[ISSUE #1233\] Fix CVE-2011-1473](https://lists.apache.org/thread.html/rc98eaa3f8223ac75aa5969f717954d8cbc9f3a9d8b7a6156a54fa557%40%3Cdev.rocketmq.apache.org%3E)  (lists.apache.org) mailing-list

## Timeline

1. ID reserved Mar 21, 2011
2. Record published Jun 16, 2012
3. Record last updated Aug 6, 2024

## Look up another CVE

## About CubePath

CubePath is a cloud provider with data centers in Europe and the United States. It offers VPS, bare metal servers and DDoS protection.

[Cloud VPS](https://cubepath.com/vps) [DDoS protection](https://cubepath.com/ddos-protection)

Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Data as of Nov 10, 2026, 20:00 UTC. [Sources and licenses](https://cubepath.com/security/cve/legal)