Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.

OSVersionArchitecturePackageVersionFilename
Debian12allopenssl< 1.0.1j-1openssl_1.0.1j-1_all.deb
Debian11allopenssl< 1.0.1j-1openssl_1.0.1j-1_all.deb
Debian10allopenssl< 1.0.1j-1openssl_1.0.1j-1_all.deb
Debian999allopenssl< 1.0.1j-1openssl_1.0.1j-1_all.deb
Debian13allopenssl< 1.0.1j-1openssl_1.0.1j-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	openssl	< 1.0.1j-1	openssl_1.0.1j-1_all.deb
Debian	11	all	openssl	< 1.0.1j-1	openssl_1.0.1j-1_all.deb
Debian	10	all	openssl	< 1.0.1j-1	openssl_1.0.1j-1_all.deb
Debian	999	all	openssl	< 1.0.1j-1	openssl_1.0.1j-1_all.deb
Debian	13	all	openssl	< 1.0.1j-1	openssl_1.0.1j-1_all.deb

f5 2

ibm 59

nessus 48

checkpoint_advisories 1

veracode 1

ubuntucve 1

prion 1

openssl 1

cve 1

openvas 30

ubuntu 1

aix 1

amazon 1

suse 7

mageia 1

centos 1

redhat 3

freebsd_advisory 1

slackware 1

freebsd 1

archlinux 1

kaspersky 2

debian 2

osv 2

securityvulns 9

vmware 2

gentoo 1

altlinux 5

oraclelinux 5

fedora 4

citrix 1

oracle 2

SOL15723 - OpenSSL vulnerability CVE-2014-3567

2014-10-21 00:00:00

K15723 : OpenSSL vulnerability CVE-2014-3567

2015-11-10 00:00:00

ibm

Security Bulletin: Vulnerabilities in OpenSSL affect NeXtScale n1200 Enclosure Fan Power Controller (FPC) (CVE-2014-3567)

2019-01-31 01:55:01

Security Bulletin: Vulnerabilities in OpenSSL affects IBM Chassis Management Module (CMM) (CVE-2014-3567)

2019-01-31 01:55:01

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2014-3513, CVE-2014-3567)

2018-06-17 14:51:46

nessus

F5 Networks BIG-IP : OpenSSL vulnerability (SOL15723)

2014-12-29 00:00:00

Tenable SecurityCenter Multiple DoS (TNS-2014-11)

2014-12-30 00:00:00

Splunk Enterprise 5.0.x < 5.0.11 Multiple Vulnerabilities (POODLE)

2014-12-04 00:00:00

checkpoint_advisories

OpenSSL Invalid Session Ticket Denial of Service (CVE-2014-3567)

2014-11-03 00:00:00

veracode

Denial Of Service (DoS) Through Memory Consumption

2017-02-06 08:56:15

ubuntucve

CVE-2014-3567

2014-10-15 00:00:00

prion

Memory corruption

2014-10-19 01:55:00

openssl

Vulnerability in OpenSSL CVE-2014-3567

2014-10-15 00:00:00

cve

CVE-2014-3567

2014-10-19 01:55:00

openvas

Ubuntu: Security Advisory (USN-2385-1)

2014-10-17 00:00:00

OpenSSL Multiple Vulnerabilities (20141015) - Linux

2021-07-19 00:00:00

SUSE: Security Advisory (SUSE-SU-2014:1512-1)

2021-06-09 00:00:00

ubuntu

OpenSSL vulnerabilities

2014-10-16 00:00:00

aix

AIX OpenSSL Denial of Service due to memory leak in DTLS / AIX OpenSSL Patch to mitigate CVE-2014-3566 / AIX OpenSSL Denial of Service due to memory consumption

2014-10-29 04:58:52

amazon

Important: openssl

2014-10-15 16:14:00

suse

Security update for OpenSSL (important)

2014-11-11 01:04:46

Security update for OpenSSL (important)

2014-11-05 23:04:47

Security update for OpenSSL (important)

2014-11-13 01:04:46

mageia

Updated openssl packages fix security vulnerabilities

2014-10-23 17:27:57

centos

openssl security update

2014-10-16 16:22:42

redhat

(RHSA-2014:1692) Important: openssl security update

2014-10-22 00:00:00

(RHSA-2014:1652) Important: openssl security update

2014-10-16 00:00:00

(RHSA-2015:0126) Critical: rhev-hypervisor6 security update

2015-02-04 00:00:00

freebsd_advisory

FreeBSD-SA-14:23.openssl

2014-10-21 00:00:00

slackware

[slackware-security] openssl

2014-10-15 17:58:22

freebsd

OpenSSL -- multiple vulnerabilities

2014-10-15 00:00:00

archlinux

openssl: denial of service / man-in-the-middle / poodle mitigation

2014-10-16 00:00:00

kaspersky

KLA10359 Vulnerability in Tableau

2014-07-18 00:00:00

KLA10452 Multiple vulnerabilities in VMware products

2015-01-27 00:00:00

debian

[SECURITY] [DSA 3053-1] openssl security update

2014-10-16 15:48:24

[SECURITY] [DLA 81-1] openssl security update

2014-11-01 15:49:46

osv

openssl - security update

2014-11-01 00:00:00

openssl - security update

2014-10-16 00:00:00

securityvulns

[slackware-security] openssl (SSA:2014-288-01)

2014-10-17 00:00:00

OpenSSL multiple security vulnerabilities

2014-12-09 00:00:00

Apple Xcode multiple security vulnerabilities

2015-10-25 00:00:00

vmware

VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues

2015-01-27 00:00:00

VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues

2015-01-27 00:00:00

gentoo

OpenSSL: Multiple vulnerabilities

2014-12-26 00:00:00

altlinux

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1j-alt1

2014-10-30 00:00:00

Security fix for the ALT Linux 9 package openssl10 version 1.0.1j-alt1

2014-10-30 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1j-alt1

2014-10-30 00:00:00

oraclelinux

openssl security update

2014-10-16 00:00:00

openssl security update

2016-09-27 00:00:00

openssl security update

2021-04-01 00:00:00

fedora

[SECURITY] Fedora 20 Update: openssl-1.0.1e-40.fc20

2014-10-18 16:57:46

[SECURITY] Fedora 19 Update: openssl-1.0.1e-40.fc19

2014-10-19 13:22:31

[SECURITY] Fedora 20 Update: openssl-1.0.1e-41.fc20

2015-01-20 21:05:44

citrix

Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Lights Out Management (LOM) firmware

2016-09-08 04:00:00

oracle

Oracle Critical Patch Update Advisory - January 2015

2015-03-10 00:00:00

Oracle Critical Patch Update Advisory - July 2015

2015-07-14 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.947 High

EPSS

Percentile

99.2%

JSON

Related for DEBIANCVE:CVE-2014-3567