Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-3569
HistoryDec 24, 2014 - 11:59 a.m.

CVE-2014-3569

2014-12-2411:59:00
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

4.3 Medium

AI Score

Confidence

High

0.892 High

EPSS

Percentile

98.8%

JSON

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling. NOTE: this issue became relevant after the CVE-2014-3568 fix.

Affected configurations

NVD
Node
opensslopensslMatch1.0.1j

References

Related

cve 3
f5 4
debiancve 2
prion 2
cvelist 2
ubuntucve 2
veracode 2
openvas 27
nessus 39
debian 4
osv 3
checkpoint_advisories 1
openssl 2
nvd 2
ibm 69
suse 8
amazon 2
securityvulns 4
freebsd_advisory 2
freebsd 2
slackware 2
archlinux 2
kaspersky 3
vmware 2
altlinux 6
cisco 1
mageia 1
cve
cve
CVE-2014-3569
2014-12-24 11:59:00
CVE-2014-3568
2014-10-19 01:55:13
CVE-2015-3569
2016-04-26 10:59:00
f5
f5
SOL16013 - OpenSSL vulnerability CVE-2014-3569
2015-01-28 00:00:00
K16013 : OpenSSL vulnerability CVE-2014-3569
2015-01-29 00:00:00
SOL15724 - OpenSSL vulnerability CVE-2014-3568
2014-10-23 00:00:00
debiancve
debiancve
CVE-2014-3569
2014-12-24 11:59:00
CVE-2014-3568
2014-10-19 01:55:13
prion
prion
Null pointer dereference
2014-12-24 11:59:00
Design/Logic Flaw
2014-10-19 01:55:00
cvelist
cvelist
CVE-2014-3569
2014-12-24 11:00:00
CVE-2014-3568
2014-10-19 01:00:00
ubuntucve
ubuntucve
CVE-2014-3569
2014-12-24 00:00:00
CVE-2014-3568
2014-10-19 00:00:00
veracode
veracode
Denial Of Service (DoS) Through Null Pointer Dereference
2017-02-06 08:21:22
Access Restriction Bypass
2017-02-06 08:45:07
openvas
openvas
Debian: Security Advisory (DLA-81-1)
2023-03-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-469)
2015-09-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-427)
2015-09-08 00:00:00
nessus
nessus
Debian DLA-81-1 : openssl security update
2015-03-26 00:00:00
OpenSSL 0.9.8 < 0.9.8zc Multiple Vulnerabilities
2014-10-17 00:00:00
OpenSSL 0.9.8 < 0.9.8zd Multiple Vulnerabilities
2015-01-16 00:00:00
debian
debian
[SECURITY] [DLA 81-1] openssl security update
2014-11-01 15:49:46
[SECURITY] [DSA 3053-1] openssl security update
2014-10-16 15:48:24
[SECURITY] [DSA 3125-1] openssl security update
2015-01-11 11:05:13
osv
osv
openssl - security update
2014-11-01 00:00:00
openssl - security update
2014-10-16 00:00:00
openssl - security update
2015-01-11 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL ssl23_get_client_hello Function Denial of Service (CVE-2014-3569)
2015-01-12 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2014-3569
2014-10-21 00:00:00
Vulnerability in OpenSSL CVE-2014-3568
2014-10-15 00:00:00
nvd
nvd
CVE-2014-3568
2014-10-19 01:55:13
CVE-2015-3569
2016-04-26 10:59:00
ibm
ibm
Security Bulletin: Vulnerabilities in SSLv3 and OpenSSL affect System x Integrated Management Module (IMM1) (CVE-2014-3566, CVE-2014-3568)
2019-01-31 01:35:01
Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cognos TM1 including a vulnerabiltiy in the RC4 stream ciphers (CVE-2015-2808, CVE-2014-3569).
2018-06-15 22:36:55
Security Bulletin: Vulnerabilities in OpenSSL affect IBM MessageSight (CVE-2014-3569, CVE-2015-0205)
2018-06-17 15:12:14
suse
suse
Security update for OpenSSL (important)
2014-11-12 19:05:00
Security update for OpenSSL (important)
2014-11-13 01:04:46
Security update for OpenSSL (important)
2014-11-11 01:04:46
amazon
amazon
Important: openssl
2014-10-15 16:14:00
Medium: openssl
2015-01-11 12:36:00
securityvulns
securityvulns
[slackware-security] openssl &#40;SSA:2014-288-01&#41;
2014-10-17 00:00:00
OpenSSL multiple security vulnerabilities
2014-12-09 00:00:00
OpenSSL multiple security vulnerabilities
2015-01-13 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:23.openssl
2014-10-21 00:00:00
FreeBSD-SA-15:01.openssl
2015-01-14 00:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2014-10-15 00:00:00
OpenSSL -- multiple vulnerabilities
2015-01-08 00:00:00
slackware
slackware
[slackware-security] openssl
2014-10-15 17:58:22
[slackware-security] openssl
2015-01-09 18:34:39
archlinux
archlinux
openssl: denial of service / man-in-the-middle / poodle mitigation
2014-10-16 00:00:00
openssl: multiple issues
2015-01-09 00:00:00
kaspersky
kaspersky
KLA10359 Vulnerability in Tableau
2014-07-18 00:00:00
KLA10460 Multiple vulnerabilities in OpenSSL
2015-01-08 00:00:00
KLA10452 Multiple vulnerabilities in VMware products
2015-01-27 00:00:00
vmware
vmware
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
2015-01-27 00:00:00
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
2015-01-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package openssl10 version 1.0.0p-alt0.M60P.1
2015-04-23 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt0.M70P.1
2015-01-12 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt1
2015-01-12 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
2015-03-10 16:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2015-01-11 22:54:28

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

4.3 Medium

AI Score

Confidence

High

0.892 High

EPSS

Percentile

98.8%

JSON
Related for NVD:CVE-2014-3569
cve3f54debiancve2prion2cvelist2ubuntucve2veracode2openvas27nessus39debian4osv3checkpoint_advisories1openssl2nvd2ibm69suse8amazon2securityvulns4freebsd_advisory2freebsd2slackware2archlinux2kaspersky3vmware2altlinux6cisco1mageia1