A flaw in the do_ssl3_write function can allow remote attackers to cause a denial of service via a NULL pointer dereference. This flaw only affects OpenSSL 1.0.0 and 1.0.1 where SSL_MODE_RELEASE_BUFFERS is enabled, which is not the default and not common.

Fixed in OpenSSL 1.0.1h (Affected since 1.0.1)
Fixed in OpenSSL 1.0.0m (Affected since 1.0.0)

nessus 87

f5 2

debiancve 1

freebsd_advisory 1

openvas 32

mariadbunix 1

checkpoint_advisories 1

ubuntucve 1

mageia 1

debian 1

osv 1

prion 1

veracode 1

freebsd 1

cve 1

ubuntu 1

securityvulns 4

ibm 33

kaspersky 1

ics 1

vmware 2

aix 1

suse 1

citrix 1

redhat 4

oraclelinux 2

slackware 1

gentoo 1

thn 1

centos 1

huawei 1

intel 1

amazon 1

cisco 1

fortinet 1

fedora 6

nessus

F5 Networks BIG-IP : SSL_MODE_RELEASE_BUFFERS vulnerability (K15329)

2014-10-10 00:00:00

Debian DSA-2931-1 : openssl - security update

2014-05-19 00:00:00

openSUSE Security Update : openssl (openSUSE-SU-2014:0635-1)

2014-06-13 00:00:00

K15329 : SSL_MODE_RELEASE_BUFFERS vulnerability CVE-2014-0198

2014-12-02 00:00:00

SOL15329 - SSL_MODE_RELEASE_BUFFERS vulnerability CVE-2014-0198

2014-06-13 00:00:00

debiancve

CVE-2014-0198

2014-05-06 10:44:00

freebsd_advisory

FreeBSD-SA-14:10.openssl

2014-05-13 00:00:00

openvas

Juniper Networks Junos OS OpenSSL Denial of Service Vulnerability

2015-01-23 00:00:00

Mageia: Security Advisory (MGASA-2014-0204)

2022-01-28 00:00:00

Debian Security Advisory DSA 2931-1 (openssl - security update)

2014-05-18 00:00:00

mariadbunix

CVE-2014-0198

2014-05-06 10:44:00

checkpoint_advisories

OpenSSL do_ssl3_write Denial of Service (CVE-2014-0198)

2014-05-19 00:00:00

ubuntucve

CVE-2014-0198

2014-05-02 00:00:00

mageia

Updated openssl packages fix CVE-2014-0198

2014-05-03 20:37:45

debian

[SECURITY] [DSA 2931-1] openssl security update

2014-05-18 12:55:05

osv

openssl - security update

2014-05-18 00:00:00

prion

Null pointer dereference

2014-05-06 10:44:00

veracode

Denial Of Service (DoS) Through Null Pointer Dereference

2017-02-07 02:22:26

freebsd

OpenSSL -- NULL pointer dereference / DoS

2014-05-02 00:00:00

cve

CVE-2014-0198

2014-05-06 10:44:00

ubuntu

OpenSSL vulnerabilities

2014-05-05 00:00:00

securityvulns

[USN-2192-1] OpenSSL vulnerabilities

2014-05-05 00:00:00

OpenSSL race conditions

2014-05-05 00:00:00

OpenSSL multiple security vulnerabilities

2014-06-06 00:00:00

ibm

Security Bulletin: IBM QRadar SIEM 7.1 MR2, and 7.2 MR2 are affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298

2018-06-16 21:18:17

Security Bulletin: IBM Real-time Compression Appliance is exposed to the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298.

2018-06-18 00:08:27

Security Bulletin: IBM Security Network Protection is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470

2018-06-16 21:18:10

kaspersky

KLA10382 Multiple vulnerabilities in VMware

2014-06-10 00:00:00

ics

Siemens OpenSSL Vulnerabilities (Update G)

2018-08-29 12:00:00

vmware

VMware product updates address OpenSSL security vulnerabilities

2014-06-10 00:00:00

VMware product updates address OpenSSL security vulnerabilities

2014-06-10 00:00:00

aix

AIX OpenSSL Vulnerabilities (Multiple CVEs)

2014-06-11 06:39:27

suse

Security update for OpenSSL 1.0 (critical)

2014-06-06 09:04:15

citrix

Citrix Security Advisory for OpenSSL Vulnerabilities (June 2014)

2014-06-06 04:00:00

redhat

(RHSA-2014:0625) Important: openssl security update

2014-06-05 00:00:00

(RHSA-2014:0679) Important: openssl security update

2014-06-10 00:00:00

(RHSA-2014:0628) Important: openssl security update

2014-06-05 00:00:00

oraclelinux

openssl security update

2014-06-05 00:00:00

openssl security update

2014-07-23 00:00:00

slackware

[slackware-security] openssl

2014-06-06 05:27:11

gentoo

OpenSSL: Multiple vulnerabilities

2014-07-27 00:00:00

thn

OpenSSL Vulnerable to Man-in-the-Middle Attack and Several Other Bugs

2014-06-05 05:49:00

centos

openssl security update

2014-06-05 13:06:47

huawei

Security Advisory-Multiple OpenSSL vulnerabilities on Huawei products

2014-06-13 00:00:00

intel

Multiple Security Issues with Intel® Manycore Platform Software Stack (Intel® MPSS) release 3.x

2014-08-26 00:00:00

amazon

Important: openssl

2014-06-04 15:45:00

cisco

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products

2014-06-05 22:40:00

fortinet

Multiple Vulnerabilities in OpenSSL

2014-06-06 00:00:00

fedora

[SECURITY] Fedora 20 Update: openssl-1.0.1e-38.fc20

2014-06-05 21:55:11

[SECURITY] Fedora 19 Update: openssl-1.0.1e-38.fc19

2014-06-05 21:54:15

[SECURITY] Fedora 21 Update: mingw-openssl-1.0.1j-1.fc21

2015-01-02 05:06:53

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.2 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.044 Low

EPSS

Percentile

92.3%

JSON

Related for OPENSSL:CVE-2014-0198