Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3572HistoryJan 09, 2015 - 2:59 a.m.
CVE-2014-3572
2015-01-0902:59:00
Debian Security Bug Tracker
security-tracker.debian.org
15
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.047 Low
EPSS
Percentile
92.5%
The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.1k-1 | openssl_1.0.1k-1_all.deb |
| Debian | 11 | all | openssl | < 1.0.1k-1 | openssl_1.0.1k-1_all.deb |
| Debian | 10 | all | openssl | < 1.0.1k-1 | openssl_1.0.1k-1_all.deb |
| Debian | 999 | all | openssl | < 1.0.1k-1 | openssl_1.0.1k-1_all.deb |
| Debian | 13 | all | openssl | < 1.0.1k-1 | openssl_1.0.1k-1_all.deb |
Related
checkpoint_advisories
checkpoint_advisories
OpenSSL Ephemeral ECDH Cipher Suite Handshake Downgrade (CVE-2014-3572)
2015-01-07 00:00:00
prion
prion
Code injection
2015-01-09 02:59:00
Code injection
2015-08-20 10:59:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (SOL16126)
2015-02-18 00:00:00
Splunk Enterprise 6.2.x < 6.2.2 Multiple Vulnerabilities (FREAK)
2015-03-13 00:00:00
f5
f5
K16126 : OpenSSL vulnerability CVE-2014-3572
2015-09-16 00:00:00
SOL16126 - OpenSSL vulnerability CVE-2014-3572
2015-02-12 00:00:00
cve
cve
openssl
openssl
Vulnerability in OpenSSL CVE-2014-3572
2015-01-05 00:00:00
veracode
veracode
ECDHE-to-ECDH Downgrade Attacks
2017-02-06 06:25:54
ubuntucve
ubuntucve
CVE-2014-3572
2015-01-08 00:00:00
ibm
ibm
oraclelinux
oraclelinux
openssl security update
2016-05-31 00:00:00
openssl security update
2015-12-14 00:00:00
openssl security update
2015-02-26 00:00:00
debian
debian
[SECURITY] [DLA 132-1] openssl security update
2015-01-11 13:16:17
[SECURITY] [DSA 3125-1] openssl security update
2015-01-11 11:05:13
[SECURITY] [DSA 3125-1] openssl security update
2015-01-11 11:05:13
osv
osv
openssl - security update
2015-01-11 00:00:00
openssl - security update
2015-01-11 00:00:00
openvas
openvas
Oracle Linux Local Check: ELSA-2015-3010
2015-10-06 00:00:00
Ubuntu Update for openssl USN-2459-1
2015-01-23 00:00:00
RedHat Update for openssl RHSA-2015:0066-01
2015-01-23 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2015-01-12 00:00:00
centos
centos
openssl security update
2015-01-20 21:00:39
securityvulns
securityvulns
[USN-2459-1] OpenSSL vulnerabilities
2015-01-13 00:00:00
OpenSSL multiple security vulnerabilities
2015-01-13 00:00:00
redhat
redhat
(RHSA-2015:0066) Moderate: openssl security update
2015-01-20 00:00:00
aix
aix
Multiple Security vulnerabilities in AIX OpenSSL
2015-02-04 06:24:41
archlinux
archlinux
openssl: multiple issues
2015-01-09 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt1
2015-01-12 00:00:00
suse
suse
Security update for openssl (important)
2015-01-23 20:05:13
Security update for libressl (important)
2015-07-22 15:08:14
Security update for compat-openssl097g (important)
2015-03-24 00:05:09
kaspersky
kaspersky
KLA10460 Multiple vulnerabilities in OpenSSL
2015-01-08 00:00:00
slackware
slackware
[slackware-security] openssl
2015-01-09 18:34:39
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:01.openssl
2015-01-14 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
2015-03-10 16:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2015-01-08 00:00:00
amazon
amazon
Medium: openssl
2015-01-11 12:36:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2015-01-11 22:54:28
fedora
fedora
[SECURITY] Fedora 20 Update: openssl-1.0.1e-41.fc20
2015-01-20 21:05:44
[SECURITY] Fedora 20 Update: openssl-1.0.1e-42.fc20
2015-03-23 07:18:26
citrix
citrix
oracle
oracle
Oracle Critical Patch Update - April 2015
2015-04-14 00:00:00
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.047 Low
EPSS
Percentile
92.5%
Related for DEBIANCVE:CVE-2014-3572