The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.

OSVersionArchitecturePackageVersionFilename
Debian12allopenssl< 1.0.1f-1openssl_1.0.1f-1_all.deb
Debian11allopenssl< 1.0.1f-1openssl_1.0.1f-1_all.deb
Debian10allopenssl< 1.0.1f-1openssl_1.0.1f-1_all.deb
Debian999allopenssl< 1.0.1f-1openssl_1.0.1f-1_all.deb
Debian13allopenssl< 1.0.1f-1openssl_1.0.1f-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	openssl	< 1.0.1f-1	openssl_1.0.1f-1_all.deb
Debian	11	all	openssl	< 1.0.1f-1	openssl_1.0.1f-1_all.deb
Debian	10	all	openssl	< 1.0.1f-1	openssl_1.0.1f-1_all.deb
Debian	999	all	openssl	< 1.0.1f-1	openssl_1.0.1f-1_all.deb
Debian	13	all	openssl	< 1.0.1f-1	openssl_1.0.1f-1_all.deb

nessus 33

f5 2

cve 1

openvas 42

veracode 2

debian 1

prion 1

gentoo 1

openssl 1

checkpoint_advisories 1

ubuntucve 1

ibm 40

mageia 1

freebsd 1

ubuntu 1

redhat 3

fedora 18

altlinux 4

oraclelinux 7

freebsd_advisory 1

centos 1

aix 1

slackware 1

securityvulns 1

amazon 1

nessus

Debian DSA-2837-1 : openssl - programming error

2014-01-08 00:00:00

openSUSE Security Update : openssl (openSUSE-SU-2014:0096-1)

2014-06-13 00:00:00

GLSA-201402-25 : OpenSSL: Denial of Service

2014-02-23 00:00:00

K15180 : OpenSSL vulnerability CVE-2013-4353

2014-04-17 00:00:00

SOL15180 - OpenSSL vulnerability CVE-2013-4353

2014-04-17 00:00:00

cve

CVE-2013-4353

2014-01-09 01:55:00

openvas

Gentoo Security Advisory GLSA 201402-25

2015-09-29 00:00:00

Debian Security Advisory DSA 2837-1 (openssl - programming error)

2014-01-07 00:00:00

Debian: Security Advisory (DSA-2837-1)

2014-01-06 00:00:00

veracode

Denial Of Service (DoS) Through Null Pointer Dereference

2017-02-08 05:45:38

Denial Of Service (DoS) Through Null Pointer Dereference

2019-01-15 08:54:56

debian

[SECURITY] [DSA 2837-1] openssl security update

2014-01-07 15:41:18

prion

Null pointer dereference

2014-01-09 01:55:00

gentoo

OpenSSL: Denial of service

2014-02-21 00:00:00

openssl

Vulnerability in OpenSSL CVE-2013-4353

2014-01-06 00:00:00

checkpoint_advisories

OpenSSL TLS Record Tampering Denial of Service (CVE-2013-4353)

2014-03-26 00:00:00

ubuntucve

CVE-2013-4353

2014-01-06 00:00:00

ibm

Security Bulletin: The IBM V840 product model number AE1 node is affected by a vulnerability in OpenSSL (CVE-2014-0224 = SSL/TLS MITM vulnerability)

2018-06-18 00:08:27

Security Bulletin: IBM Netezza Platform Software is affected by a vulnerability in OpenSSL (CVE-2014-0160)

2019-10-18 03:10:29

Security Bulletin: IBM WebSphere Hypervisor Edition on zLinux for SmartCloud Orchestrator is affected by vulnerability in OpenSSL (CVE-2014-0160)

2018-06-15 06:59:59

mageia

Updated openssl package fixes security vulnerabilities

2014-01-17 04:33:19

freebsd

openssl -- multiple vulnerabilities

2014-01-06 00:00:00

ubuntu

OpenSSL vulnerabilities

2014-01-09 00:00:00

redhat

(RHSA-2014:0015) Important: openssl security update

2014-01-08 00:00:00

(RHSA-2014:0416) Important: rhevm-spice-client security update

2014-04-17 00:00:00

(RHSA-2014:0041) Important: rhev-hypervisor6 security update

2014-01-21 00:00:00

fedora

[SECURITY] Fedora 19 Update: mingw-openssl-1.0.1e-5.fc19

2014-02-04 02:52:09

[SECURITY] Fedora 20 Update: mingw-openssl-1.0.1e-5.fc20

2014-01-28 04:44:00

[SECURITY] Fedora 20 Update: openssl-1.0.1e-37.fc20

2014-01-10 07:58:51

altlinux

Security fix for the ALT Linux 8 package openssl10 version 1.0.1f-alt1

2014-01-06 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1f-alt1

2014-01-06 00:00:00

Security fix for the ALT Linux 9 package openssl10 version 1.0.1f-alt1

2014-01-06 00:00:00

oraclelinux

openssl security update

2014-01-08 00:00:00

openssl security update

2014-10-16 00:00:00

openssl-fips security update

2015-04-02 00:00:00

freebsd_advisory

FreeBSD-SA-14:03.openssl

2014-01-14 00:00:00

centos

openssl security update

2014-01-08 22:59:22

aix

Multiple OpenSSL vulnerabilities

2014-02-25 14:07:48

slackware

openssl

2014-01-13 22:30:19

securityvulns

OpenSSL security vulnerabilities

2014-01-08 00:00:00

amazon

Important: openssl

2014-01-14 15:56:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.542 Medium

EPSS

Percentile

97.6%

JSON

Related for DEBIANCVE:CVE-2013-4353