EUVD-2014-5037

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

OpenSSL before 1.0.1i allows remote SSL servers to crash clients via unnegotiated SRP ciphersuite.

Reporter	Title	Published	Views	Family All 111
IBM Security Bulletins	Security Bulletin: Vulnerabilities disclosed by OpenSSL project on August 6, 2014 that impact DataPower (CVE-2014-3508 and CVE-2014-3511)	20 Mar 202001:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Worklight (CVE-2014-3509, CVE-2014-5139)	17 Jun 201822:31	–	ibm
IBM Security Bulletins	Security Bulletin: Rational RequisitePro affected by OpenSSL vulnerabilities: (CVE-2014-5139, CVE-2014-3509, CVE-2014-3511)	17 Jun 201804:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect Upward Integration Modules (UIM) (CVE-2014-3508, CVE-2014-5139, CVE-2014-3509, CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3511, CVE-2014-3512)	31 Jan 201901:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors	17 Jun 201814:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect Flex System FC3171 8Gb SAN Switch and Flex System FC3171 8Gb SAN Pass-thru	31 Jan 201901:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Netezza Platform Software	18 Oct 201903:10	–	ibm
IBM Security Bulletins	Security Bulletin: Network Intrusion Prevention System is affected by multiple OpenSSL vulnerabilities (CVE-2014-3508, CVE-2014-3509, CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3511)	23 Feb 202219:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM PureData System for Operational Analytics is affected by multiple vulnerabilities in OpenSSL	18 Oct 201903:50	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Management Framework is affected by the following OpenSSL vulnerabilities: CVE-2014-3508 CVE-2014-5139 CVE-2014-3509 CVE-2014-3505 CVE-2014-3506 CVE-2014-3507 CVE-2014-3510 CVE-2014-3511 CVE-2014-3512 CVE-2014-3513 CVE-2014-3566 (POODLE Attack) CVE-2014-3567 CVE-2014-3568.	17 Jun 201814:51	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "cd0c6d89-d8b1-390f-bcc2-7ed107eba911",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "66ffd7f9-8fd9-3dce-ad2f-fcc456d69173",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2014-5139.html
debian	www.debian.org/security/2014/dsa-2998
ubuntu	www.ubuntu.com/security/CVE-2014-5139
advisories	www.advisories.mageia.org/CVE-2014-5139.html
alas	www.alas.aws.amazon.com/cve/html/CVE-2014-5139.html
lists	www.lists.opensuse.org/opensuse-updates/2014-08/msg00036.html
support	www.support.f5.com/kb/en-us/solutions/public/15000/500/sol15567.html
secunia	www.secunia.com/advisories/60221
www-01	www.www-01.ibm.com/support/docview.wss
secunia	www.secunia.com/advisories/61184

03 Oct 2025 20:07Current

7High risk

Vulners AI Score7

CVSS 24.3

EPSS0.34029

openssl vulnerability denial of service srp ciphersuite client crash