Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-3569
HistoryDec 24, 2014 - 11:59 a.m.

CVE-2014-3569

2014-12-2411:59:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
89
cve-2014-3569
openssl
sslv3
denial of service
nvd

4.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.891 High

EPSS

Percentile

98.7%

JSON

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling. NOTE: this issue became relevant after the CVE-2014-3568 fix.

CPENameOperatorVersion
openssl:opensslopenssleq1.0.1j

References

Related

f5 4
debiancve 2
prion 2
ubuntucve 2
veracode 2
checkpoint_advisories 1
openssl 2
osv 3
nessus 45
debian 4
openvas 25
ibm 69
cve 2
amazon 2
suse 8
kaspersky 3
slackware 2
archlinux 2
altlinux 6
securityvulns 6
freebsd_advisory 2
cisco 1
freebsd 2
mageia 1
vmware 1
f5
f5
SOL16013 - OpenSSL vulnerability CVE-2014-3569
2015-01-28 00:00:00
K16013 : OpenSSL vulnerability CVE-2014-3569
2015-01-29 00:00:00
SOL15724 - OpenSSL vulnerability CVE-2014-3568
2014-10-23 00:00:00
debiancve
debiancve
CVE-2014-3569
2014-12-24 11:59:00
CVE-2014-3568
2014-10-19 01:55:00
prion
prion
Null pointer dereference
2014-12-24 11:59:00
Design/Logic Flaw
2014-10-19 01:55:00
ubuntucve
ubuntucve
CVE-2014-3569
2014-12-24 00:00:00
CVE-2014-3568
2014-10-19 00:00:00
veracode
veracode
Denial Of Service (DoS) Through Null Pointer Dereference
2017-02-06 08:21:22
Access Restriction Bypass
2017-02-06 08:45:07
checkpoint_advisories
checkpoint_advisories
OpenSSL ssl23_get_client_hello Function Denial of Service (CVE-2014-3569)
2015-01-12 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2014-3569
2014-10-21 00:00:00
Vulnerability in OpenSSL CVE-2014-3568
2014-10-15 00:00:00
osv
osv
openssl - security update
2014-11-01 00:00:00
openssl - security update
2015-01-11 00:00:00
openssl - security update
2014-10-16 00:00:00
nessus
nessus
Debian DLA-81-1 : openssl security update
2015-03-26 00:00:00
Amazon Linux AMI : openssl (ALAS-2015-469) (FREAK)
2015-01-13 00:00:00
HP System Management Homepage < 7.2.5 / 7.4.1 Multiple Vulnerabilities (POODLE)
2015-08-03 00:00:00
debian
debian
[SECURITY] [DLA 81-1] openssl security update
2014-11-01 15:49:46
[SECURITY] [DSA 3125-1] openssl security update
2015-01-11 11:05:13
[SECURITY] [DSA 3125-1] openssl security update
2015-01-11 11:05:13
openvas
openvas
Debian: Security Advisory (DLA-81-1)
2023-03-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-469)
2015-09-08 00:00:00
OpenSSL Multiple Vulnerabilities (20150108 - 1) - Windows
2021-07-19 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in OpenSSL affect IBM MessageSight (CVE-2014-3569, CVE-2015-0205)
2018-06-17 15:12:14
Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cognos TM1 including a vulnerabiltiy in the RC4 stream ciphers (CVE-2015-2808, CVE-2014-3569).
2018-06-15 22:36:55
Security Bulletin: Vulnerabilities in OpenSSL affect System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface (UEFI) (CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572, CVE-2014-8275)
2019-01-31 01:55:01
cve
cve
CVE-2015-3569
2016-04-26 10:59:00
CVE-2014-3568
2014-10-19 01:55:00
amazon
amazon
Medium: openssl
2015-01-11 12:36:00
Important: openssl
2014-10-15 16:14:00
suse
suse
Security update for OpenSSL (important)
2014-11-12 19:05:00
Security update for openssl (important)
2015-01-23 20:05:13
Security update for OpenSSL (important)
2014-11-05 23:04:47
kaspersky
kaspersky
KLA10460 Multiple vulnerabilities in OpenSSL
2015-01-08 00:00:00
KLA10359 Vulnerability in Tableau
2014-07-18 00:00:00
KLA10452 Multiple vulnerabilities in VMware products
2015-01-27 00:00:00
slackware
slackware
[slackware-security] openssl
2015-01-09 18:34:39
[slackware-security] openssl
2014-10-15 17:58:22
archlinux
archlinux
openssl: multiple issues
2015-01-09 00:00:00
openssl: denial of service / man-in-the-middle / poodle mitigation
2014-10-16 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt0.M70P.1
2015-01-12 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 1.0.0p-alt0.M60P.1
2015-04-23 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt1
2015-01-12 00:00:00
securityvulns
securityvulns
OpenSSL multiple security vulnerabilities
2015-01-13 00:00:00
[slackware-security] openssl &#40;SSA:2014-288-01&#41;
2014-10-17 00:00:00
[security bulletin] HPSBMU03396 rev.1 - HP Version Control Repository Manager &#40;VCRM&#41; on Windows and Linux, Multiple Vulnerabilities
2015-09-14 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:01.openssl
2015-01-14 00:00:00
FreeBSD-SA-14:23.openssl
2014-10-21 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
2015-03-10 16:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2015-01-08 00:00:00
OpenSSL -- multiple vulnerabilities
2014-10-15 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2015-01-11 22:54:28
vmware
vmware
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
2015-01-27 00:00:00

4.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.891 High

EPSS

Percentile

98.7%

JSON
Related for CVE-2014-3569
f54debiancve2prion2ubuntucve2veracode2checkpoint_advisories1openssl2osv3nessus45debian4openvas25ibm69cve2amazon2suse8kaspersky3slackware2archlinux2altlinux6securityvulns6freebsd_advisory2cisco1freebsd2mageia1vmware1