A Double Free was found when processing DTLS packets. An attacker can force an error condition which causes openssl to crash whilst processing DTLS packets due to memory being freed twice. This could lead to a Denial of Service attack.

cve 1

checkpoint_advisories 1

veracode 2

ubuntucve 1

prion 1

debiancve 1

f5 2

ibm 30

nessus 43

openvas 32

debian 2

redhat 3

centos 2

oraclelinux 8

slackware 1

mageia 1

freebsd 1

aix 1

amazon 1

securityvulns 1

kaspersky 1

osv 1

ubuntu 1

huawei 1

fedora 8

altlinux 5

gentoo 1

suse 1

lenovo 2

cve

CVE-2014-3505

2014-08-13 23:55:00

checkpoint_advisories

OpenSSL DTLS Handshake Double Free (CVE-2014-3505)

2014-09-30 00:00:00

veracode

Denial Of Service (DoS)

2019-01-15 08:59:12

Denial Of Service (DoS)

2017-02-07 01:37:14

ubuntucve

CVE-2014-3505

2014-08-07 00:00:00

prion

Double free

2014-08-13 23:55:00

debiancve

CVE-2014-3505

2014-08-13 23:55:00

K15573 : OpenSSL DTLS vulnerabilities CVE-2014-3505, CVE-2014-3506, and CVE-2014-3507

2015-09-15 00:00:00

SOL15573 - OpenSSL DTLS vulnerabilities CVE-2014-3505, CVE-2014-3506, and CVE-2014-3507

2014-09-05 00:00:00

ibm

Security Bulletin: Vulnerability in Open SSL affects IBM System Networking products

2019-01-31 01:45:01

Security Bulletin: Network Protection is affected by multiple OpenSSL vulnerabilities (CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3511)

2018-06-16 21:19:45

Security Bulletin: Multiple vulnerabilities in OpenSSL affect MegaRAID Storage Manager (CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3567)

2019-01-31 01:55:01

nessus

OpenSSL 0.9.8 < 0.9.8zb Multiple Vulnerabilities

2014-08-08 00:00:00

CentOS 5 : openssl (CESA-2014:1053)

2014-08-14 00:00:00

Debian DLA-33-1 : openssl security update

2015-03-26 00:00:00

openvas

Debian: Security Advisory (DLA-33-1)

2023-03-08 00:00:00

OpenSSL Multiple Vulnerabilities (20140806 - 1) - Windows

2021-07-19 00:00:00

SUSE: Security Advisory (SUSE-SU-2014:1104-1)

2021-06-09 00:00:00

debian

[DLA 33-1] openssl security update

2014-08-07 20:36:09

[SECURITY] [DSA 2998-1] openssl security update

2014-08-06 23:44:13

redhat

(RHSA-2014:1053) Moderate: openssl security update

2014-08-13 00:00:00

(RHSA-2014:1052) Moderate: openssl security update

2014-08-13 00:00:00

(RHSA-2014:1054) Moderate: openssl security update

2014-08-14 00:00:00

centos

openssl security update

2014-08-13 19:52:24

openssl security update

2014-08-13 20:10:43

oraclelinux

openssl security update

2014-08-13 00:00:00

openssl security update

2014-08-13 00:00:00

openssl security update

2014-10-16 00:00:00

slackware

[slackware-security] openssl

2014-08-08 21:22:00

mageia

Updated openssl packages fix security vulnerabilities

2014-08-12 13:16:46

freebsd

OpenSSL -- multiple vulnerabilities

2014-08-06 00:00:00

aix

AIX OpenSSL Denial of Service due to double free and others

2014-09-09 00:50:00

amazon

Medium: openssl

2014-08-07 12:26:00

securityvulns

OpenSSL multiple security vulnerabilities

2014-08-07 00:00:00

kaspersky

KLA10343 Multiple vulnerabilities in Stunnel

2014-08-07 00:00:00

osv

openssl - security update

2014-08-07 00:00:00

ubuntu

OpenSSL vulnerabilities

2014-08-07 00:00:00

huawei

Security Advisory-9 OpenSSL vulnerabilities on Huawei products

2014-10-08 00:00:00

fedora

[SECURITY] Fedora 21 Update: mingw-openssl-1.0.1j-1.fc21

2015-01-02 05:06:53

[SECURITY] Fedora 19 Update: openssl-1.0.1e-39.fc19

2014-08-09 07:34:58

[SECURITY] Fedora 20 Update: openssl-1.0.1e-39.fc20

2014-08-09 07:36:05

altlinux

Security fix for the ALT Linux 8 package openssl10 version 1.0.1j-alt1

2014-10-30 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1j-alt0.M70P.1

2014-10-31 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1j-alt1

2014-10-30 00:00:00

gentoo

OpenSSL: Multiple vulnerabilities

2014-12-26 00:00:00

suse

Security update for libopenssl0_9_8 (important)

2016-03-03 14:11:44

lenovo

Intel® PROSet/Wireless WiFi Software Vulnerabilities - US

2018-11-13 17:10:51

Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US

2018-11-13 17:10:51

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

4.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.92 High

EPSS

Percentile

98.9%

JSON

Related for OPENSSL:CVE-2014-3505