The vulnerability of the dtls1_clear_queues function in the OpenSSL library allows a attacker to cause a service failure or potentially cause other effects.

🗓️ 27 Apr 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

OpenSSL dtls1_clear_queues vulnerability causes buffer overflow leading to service disruption.

Reporter	Title	Published	Views	Family All 144
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect Sterling Connect:Express for UNIX (CVE-2015-4000, CVE-2014-8176, CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792)	24 Jul 202022:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Security Network Protection	16 Jun 201821:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect multiple N series products	15 Dec 202118:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Storwize V7000 Unified (CVE-2014-8176, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792)	18 Jun 201800:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM® Rational Team Concert™ Build Agent (CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792, CVE-2014-8176)	17 Jun 201805:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by multiple vulnerabilities in OpenSSL including Logjam	31 Jan 201902:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect Rational Software Architect and Rational Software Architect for Websphere Software	10 Sep 202017:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect IBM® SDK for Node.js™	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Open SSL affect Power Hardware Management Console (CVE-2014-8176,CVE-2015-1788,CVE-2015-1789,CVE-2015-1790,CVE-2015-1791,CVE-2015-1792,CVE-2015-3216)	23 Sep 202101:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Access Manager for Web	16 Jun 201821:26	–	ibm

Vulners

Node

openssl opensslMatch1.0.1c

openssl opensslMatch1.0.1d

openssl opensslMatch1.0.1e

openssl opensslMatch1.0.1f

openssl opensslMatch1.0.1a

openssl opensslMatch1.0.1b

openssl opensslMatch1.0.1

openssl opensslMatch1.0.1g

openssl opensslRange≤0.9.8z

openssl opensslMatch1.0.0a

openssl opensslMatch1.0.0b

openssl opensslMatch1.0.0c

openssl opensslMatch1.0.0j

openssl opensslMatch1.0.0k

openssl opensslMatch1.0.0beta4

openssl opensslMatch1.0.0beta5

openssl opensslMatch1.0.0h

openssl opensslMatch1.0.0i

openssl opensslMatch1.0.1beta3

openssl opensslMatch1.0.0beta2

openssl opensslMatch1.0.0beta3

openssl opensslMatch1.0.0f

openssl opensslMatch1.0.0g

openssl opensslMatch1.0.1beta1

openssl opensslMatch1.0.1beta2

openssl opensslMatch1.0.0

openssl opensslMatch1.0.0beta1

openssl opensslMatch1.0.0d

openssl opensslMatch1.0.0e

openssl opensslMatch1.0.0l

canonical ubuntuMatch14.10

red_hat red_hat_enterprise_linuxMatch6

red_hat red_hat_enterprise_linuxMatch7

canonical ubuntuMatch12.04

canonical ubuntuMatch15.04

Source	Link
github	www.github.com/openssl/openssl/commit/470990fee0182566d439ef7e82d1abf18b7085d7
rt	www.rt.openssl.org/Ticket/Display.html
openssl	www.openssl.org/news/secadv_20150611.txt
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
securityfocus	www.securityfocus.com/bid/75159
openssl	www.openssl.org/news/secadv/20150611.txt
fortiguard	www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015
fortiguard	www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015
bto	www.bto.bluecoat.com/security-advisory/sa98
security	www.security.gentoo.org/glsa/201506-02

27 Apr 2022 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 37.3

CVSS 27.5

EPSS0.16587