A flaw in the do_ssl3_write function can allow remote attackers to cause a denial of service via a NULL pointer dereference. This flaw only affects OpenSSL 1.0.0 and 1.0.1 where SSL_MODE_RELEASE_BUFFERS is enabled, which is not the default and not common.

Affected configurations

Vulners

Node

opensslopensslRange1.0.1–1.0.1h

opensslopensslRange1.0.0–1.0.0m

VendorProductVersionCPE
opensslopenssl*cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openssl	openssl	*	cpe:2.3:a:openssl:openssl::::::::

mariadbunix 1

checkpoint_advisories 1

ubuntucve 1

mageia 1

nessus 86

debian 1

osv 1

openvas 32

nvd 1

f5 2

debiancve 1

freebsd_advisory 1

freebsd 1

cvelist 1

cve 1

prion 1

veracode 1

ubuntu 1

securityvulns 4

ibm 33

kaspersky 1

ics 1

vmware 2

aix 1

suse 1

redhat 4

slackware 1

oraclelinux 2

gentoo 1

thn 1

centos 1

huawei 1

cisco 1

intel 1

amazon 1

fortinet 1

fedora 6

mariadbunix

CVE-2014-0198

2014-05-06 10:44:05

checkpoint_advisories

OpenSSL do_ssl3_write Denial of Service (CVE-2014-0198)

2014-05-19 00:00:00

ubuntucve

CVE-2014-0198

2014-05-02 00:00:00

mageia

Updated openssl packages fix CVE-2014-0198

2014-05-03 20:37:45

nessus

Debian DSA-2931-1 : openssl - security update

2014-05-19 00:00:00

openSUSE Security Update : openssl (openSUSE-SU-2014:0635-1)

2014-06-13 00:00:00

Mandriva Linux Security Advisory : openssl (MDVSA-2014:080)

2014-05-09 00:00:00

debian

[SECURITY] [DSA 2931-1] openssl security update

2014-05-18 12:55:05

osv

openssl - security update

2014-05-18 00:00:00

openvas

Debian Security Advisory DSA 2931-1 (openssl - security update)

2014-05-18 00:00:00

Juniper Networks Junos OS OpenSSL Denial of Service Vulnerability

2015-01-23 00:00:00

Mageia: Security Advisory (MGASA-2014-0204)

2022-01-28 00:00:00

nvd

CVE-2014-0198

2014-05-06 10:44:05

K15329 : SSL_MODE_RELEASE_BUFFERS vulnerability CVE-2014-0198

2014-12-02 00:00:00

SOL15329 - SSL_MODE_RELEASE_BUFFERS vulnerability CVE-2014-0198

2014-06-13 00:00:00

debiancve

CVE-2014-0198

2014-05-06 10:44:05

freebsd_advisory

FreeBSD-SA-14:10.openssl

2014-05-13 00:00:00

freebsd

OpenSSL -- NULL pointer dereference / DoS

2014-05-02 00:00:00

cvelist

CVE-2014-0198

2014-05-06 10:00:00

cve

CVE-2014-0198

2014-05-06 10:44:05

prion

Null pointer dereference

2014-05-06 10:44:00

veracode

Denial Of Service (DoS) Through Null Pointer Dereference

2017-02-07 02:22:26

ubuntu

OpenSSL vulnerabilities

2014-05-05 00:00:00

securityvulns

[USN-2192-1] OpenSSL vulnerabilities

2014-05-05 00:00:00

OpenSSL race conditions

2014-05-05 00:00:00

OpenSSL multiple security vulnerabilities

2014-06-06 00:00:00

ibm

Security Bulletin: IBM QRadar SIEM 7.1 MR2, and 7.2 MR2 are affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298

2018-06-16 21:18:17

Security Bulletin: IBM Real-time Compression Appliance is exposed to the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298.

2018-06-18 00:08:27

Security Bulletin: IBM Security Network Protection is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470

2018-06-16 21:18:10

kaspersky

KLA10382 Multiple vulnerabilities in VMware

2014-06-10 00:00:00

ics

Siemens OpenSSL Vulnerabilities (Update G)

2018-08-29 12:00:00

vmware

VMware product updates address OpenSSL security vulnerabilities

2014-06-10 00:00:00

VMware product updates address OpenSSL security vulnerabilities

2014-06-10 00:00:00

aix

AIX OpenSSL Vulnerabilities (Multiple CVEs)

2014-06-11 06:39:27

suse

Security update for OpenSSL 1.0 (critical)

2014-06-06 09:04:15

redhat

(RHSA-2014:0625) Important: openssl security update

2014-06-05 00:00:00

(RHSA-2014:0628) Important: openssl security update

2014-06-05 00:00:00

(RHSA-2014:0679) Important: openssl security update

2014-06-10 00:00:00

slackware

[slackware-security] openssl

2014-06-06 05:27:11

oraclelinux

openssl security update

2014-06-05 00:00:00

openssl security update

2014-07-23 00:00:00

gentoo

OpenSSL: Multiple vulnerabilities

2014-07-27 00:00:00

thn

OpenSSL Vulnerable to Man-in-the-Middle Attack and Several Other Bugs

2014-06-05 05:49:00

centos

openssl security update

2014-06-05 13:06:47

huawei

Security Advisory-Multiple OpenSSL vulnerabilities on Huawei products

2014-06-13 00:00:00

cisco

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products

2014-06-05 22:40:00

intel

Multiple Security Issues with Intel® Manycore Platform Software Stack (Intel® MPSS) release 3.x

2014-08-26 00:00:00

amazon

Important: openssl

2014-06-04 15:45:00

fortinet

Multiple Vulnerabilities in OpenSSL

2014-06-06 00:00:00

fedora

[SECURITY] Fedora 19 Update: openssl-1.0.1e-38.fc19

2014-06-05 21:54:15

[SECURITY] Fedora 20 Update: openssl-1.0.1e-38.fc20

2014-06-05 21:55:11

[SECURITY] Fedora 21 Update: mingw-openssl-1.0.1j-1.fc21

2015-01-02 05:06:53

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

7.3

Confidence

High

EPSS

0.041

Percentile

92.2%

JSON

Related for OPENSSL:CVE-2014-0198