Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3507HistoryAug 13, 2014 - 11:55 p.m.
CVE-2014-3507
2014-08-1323:55:00
Debian Security Bug Tracker
security-tracker.debian.org
13
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.938 High
EPSS
Percentile
99.1%
Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of the return value of a certain insert function.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.1i-1 | openssl_1.0.1i-1_all.deb |
| Debian | 11 | all | openssl | < 1.0.1i-1 | openssl_1.0.1i-1_all.deb |
| Debian | 10 | all | openssl | < 1.0.1i-1 | openssl_1.0.1i-1_all.deb |
| Debian | 999 | all | openssl | < 1.0.1i-1 | openssl_1.0.1i-1_all.deb |
| Debian | 13 | all | openssl | < 1.0.1i-1 | openssl_1.0.1i-1_all.deb |
Related
openssl
openssl
Vulnerability in OpenSSL CVE-2014-3507
2014-08-06 00:00:00
ubuntucve
ubuntucve
CVE-2014-3507
2014-08-07 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL dtls1_process_out_of_seq_message Denial of Service (CVE-2014-3507)
2014-10-07 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:08:11
prion
prion
Memory corruption
2014-08-13 23:55:00
cve
cve
CVE-2014-3507
2014-08-13 23:55:00
f5
f5
ibm
ibm
Security Bulletin: Network Protection is affected by multiple OpenSSL vulnerabilities (CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3511)
2018-06-16 21:19:45
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:1104-1)
2021-06-09 00:00:00
OpenSSL Multiple Vulnerabilities (20140806 - 1) - Windows
2021-07-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1049-1)
2021-06-09 00:00:00
nessus
nessus
SuSE 11.3 Security Update : OpenSSL (SAT Patch Number 9598)
2014-08-21 00:00:00
OpenSSL 0.9.8 < 0.9.8zb Multiple Vulnerabilities
2014-08-08 00:00:00
Debian DLA-33-1 : openssl security update
2015-03-26 00:00:00
debian
debian
[DLA 33-1] openssl security update
2014-08-07 20:36:09
[SECURITY] [DSA 2998-1] openssl security update
2014-08-06 23:44:13
oraclelinux
oraclelinux
openssl security update
2014-08-13 00:00:00
openssl security update
2014-10-16 00:00:00
openssl security update
2016-09-27 00:00:00
redhat
redhat
(RHSA-2014:1052) Moderate: openssl security update
2014-08-13 00:00:00
(RHSA-2014:1054) Moderate: openssl security update
2014-08-14 00:00:00
centos
centos
openssl security update
2014-08-13 20:10:43
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:18.openssl
2014-09-09 00:00:00
aix
aix
AIX OpenSSL Denial of Service due to double free and others
2014-09-09 00:50:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2014-08-06 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2014-08-12 13:16:46
amazon
amazon
Medium: openssl
2014-08-07 12:26:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-08-07 00:00:00
huawei
huawei
Security Advisory-9 OpenSSL vulnerabilities on Huawei products
2014-10-08 00:00:00
osv
osv
openssl - security update
2014-08-07 00:00:00
securityvulns
securityvulns
OpenSSL multiple security vulnerabilities
2014-08-07 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
kaspersky
kaspersky
KLA10343 Multiple vulnerabilities in Stunnel
2014-08-07 00:00:00
slackware
slackware
[slackware-security] openssl
2014-08-08 21:22:00
fedora
fedora
[SECURITY] Fedora 21 Update: mingw-openssl-1.0.1j-1.fc21
2015-01-02 05:06:53
[SECURITY] Fedora 20 Update: openssl-1.0.1e-39.fc20
2014-08-09 07:36:05
[SECURITY] Fedora 19 Update: openssl-1.0.1e-39.fc19
2014-08-09 07:34:58
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2014-12-26 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1j-alt1
2014-10-30 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.1j-alt1
2014-10-30 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1j-alt1
2014-10-30 00:00:00
suse
suse
Security update for libopenssl0_9_8 (important)
2016-03-03 14:11:44
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.938 High
EPSS
Percentile
99.1%
Related for DEBIANCVE:CVE-2014-3507