The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling. NOTE: this issue became relevant after the CVE-2014-3568 fix. (CVE-2014-3569)

Impact

None

CPENameOperatorVersion
big-ip afmeq11.3.0
big-ip afmeq11.4.0
big-ip afmeq11.4.1
big-ip afmeq11.5.0
big-ip afmeq11.5.1
big-ip afmeq11.6.0
big-ip analyticseq11.0.0
big-ip analyticseq11.1.0
big-ip analyticseq11.2.0
big-ip analyticseq11.2.1

Name	Operator	Version
big-ip afm	eq	11.3.0
big-ip afm	eq	11.4.0
big-ip afm	eq	11.4.1
big-ip afm	eq	11.5.0
big-ip afm	eq	11.5.1
big-ip afm	eq	11.6.0
big-ip analytics	eq	11.0.0
big-ip analytics	eq	11.1.0
big-ip analytics	eq	11.2.0
big-ip analytics	eq	11.2.1

Rows per page:

1-10 of 1851

prion 2

ubuntucve 2

veracode 2

f5 3

debiancve 2

cve 3

nessus 41

debian 4

osv 3

openvas 28

checkpoint_advisories 1

openssl 2

suse 8

ibm 69

amazon 2

securityvulns 5

archlinux 2

kaspersky 3

slackware 2

freebsd 2

freebsd_advisory 2

vmware 2

altlinux 7

cisco 1

mageia 1

prion

Null pointer dereference

2014-12-24 11:59:00

Design/Logic Flaw

2014-10-19 01:55:00

ubuntucve

CVE-2014-3569

2014-12-24 00:00:00

CVE-2014-3568

2014-10-19 00:00:00

veracode

Denial Of Service (DoS) Through Null Pointer Dereference

2017-02-06 08:21:22

Access Restriction Bypass

2017-02-06 08:45:07

SOL16013 - OpenSSL vulnerability CVE-2014-3569

2015-01-28 00:00:00

SOL15724 - OpenSSL vulnerability CVE-2014-3568

2014-10-23 00:00:00

K15724 : OpenSSL vulnerability CVE-2014-3568

2014-10-23 00:00:00

debiancve

CVE-2014-3569

2014-12-24 11:59:00

CVE-2014-3568

2014-10-19 01:55:00

cve

CVE-2014-3569

2014-12-24 11:59:00

CVE-2014-3568

2014-10-19 01:55:00

CVE-2015-3569

2016-04-26 10:59:00

nessus

Debian DLA-81-1 : openssl security update

2015-03-26 00:00:00

Amazon Linux AMI : openssl (ALAS-2015-469) (FREAK)

2015-01-13 00:00:00

SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2014:1512-1) (POODLE)

2015-05-20 00:00:00

debian

[SECURITY] [DLA 81-1] openssl security update

2014-11-01 15:49:46

[SECURITY] [DSA 3053-1] openssl security update

2014-10-16 15:48:24

[SECURITY] [DSA 3125-1] openssl security update

2015-01-11 11:05:13

osv

openssl - security update

2014-11-01 00:00:00

openssl - security update

2014-10-16 00:00:00

openssl - security update

2015-01-11 00:00:00

openvas

Debian: Security Advisory (DLA-81-1)

2023-03-08 00:00:00

OpenSSL Multiple Vulnerabilities (20141015) - Windows

2021-07-19 00:00:00

SUSE: Security Advisory for OpenSSL (SUSE-SU-2014:1361-1)

2015-10-13 00:00:00

checkpoint_advisories

OpenSSL ssl23_get_client_hello Function Denial of Service (CVE-2014-3569)

2015-01-12 00:00:00

openssl

Vulnerability in OpenSSL CVE-2014-3569

2014-10-21 00:00:00

Vulnerability in OpenSSL CVE-2014-3568

2014-10-15 00:00:00

suse

Security update for OpenSSL (important)

2014-11-12 19:05:00

Security update for OpenSSL (important)

2014-11-13 01:04:46

Security update for OpenSSL (important)

2014-11-05 23:04:47

ibm

Security Bulletin: Vulnerabilities in SSLv3 and OpenSSL affect System x Integrated Management Module (IMM1) (CVE-2014-3566, CVE-2014-3568)

2019-01-31 01:35:01

Security Bulletin: Vulnerabilities in OpenSSL affect IBM MessageSight (CVE-2014-3569, CVE-2015-0205)

2018-06-17 15:12:14

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cognos TM1 including a vulnerabiltiy in the RC4 stream ciphers (CVE-2015-2808, CVE-2014-3569).

2018-06-15 22:36:55

amazon

Medium: openssl

2015-01-11 12:36:00

Important: openssl

2014-10-15 16:14:00

securityvulns

[slackware-security] openssl (SSA:2014-288-01)

2014-10-17 00:00:00

OpenSSL multiple security vulnerabilities

2014-12-09 00:00:00

OpenSSL multiple security vulnerabilities

2015-01-13 00:00:00

archlinux

openssl: denial of service / man-in-the-middle / poodle mitigation

2014-10-16 00:00:00

openssl: multiple issues

2015-01-09 00:00:00

kaspersky

KLA10359 Vulnerability in Tableau

2014-07-18 00:00:00

KLA10452 Multiple vulnerabilities in VMware products

2015-01-27 00:00:00

KLA10460 Multiple vulnerabilities in OpenSSL

2015-01-08 00:00:00

slackware

[slackware-security] openssl

2014-10-15 17:58:22

[slackware-security] openssl

2015-01-09 18:34:39

freebsd

OpenSSL -- multiple vulnerabilities

2014-10-15 00:00:00

OpenSSL -- multiple vulnerabilities

2015-01-08 00:00:00

freebsd_advisory

FreeBSD-SA-14:23.openssl

2014-10-21 00:00:00

FreeBSD-SA-15:01.openssl

2015-01-14 00:00:00

vmware

VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues

2015-01-27 00:00:00

VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues

2015-01-27 00:00:00

altlinux

Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt1

2015-01-12 00:00:00

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt1

2015-01-12 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt1

2015-01-12 00:00:00

cisco

Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products

2015-03-10 16:00:00

mageia

Updated openssl packages fix security vulnerabilities

2015-01-11 22:54:28

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

4.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.902 High

EPSS

Percentile

98.6%

JSON

Related for F5:K16013