Lucene search
OpenSSLOPENSSL:CVE-2014-3511HistoryAug 06, 2014 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2014-3511
2014-08-0600:00:00
www.openssl.org
28
4.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
80.3%
A flaw in the OpenSSL SSL/TLS server code causes the server to negotiate TLS 1.0 instead of higher protocol versions when the ClientHello message is badly fragmented. This allows a man-in-the-middle attacker to force a downgrade to TLS 1.0 even if both the server and the client support a higher protocol version, by modifying the client's TLS records.
Related
checkpoint_advisories
checkpoint_advisories
OpenSSL TLS Protocol Downgrade Attack (CVE-2014-3511)
2014-11-10 00:00:00
debiancve
debiancve
CVE-2014-3511
2014-08-13 23:55:00
f5
f5
K15564 : TLS vulnerability CVE-2014-3511
2015-09-11 00:00:00
SOL15564 - TLS vulnerability CVE-2014-3511
2014-09-05 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2017-02-07 00:57:09
ubuntucve
ubuntucve
CVE-2014-3511
2014-08-07 00:00:00
nessus
nessus
F5 Networks BIG-IP : TLS vulnerability (SOL15564)
2014-10-10 00:00:00
Oracle Solaris Third-Party Patch Update : openssl (cve_2014_3508_information_disclosure)
2015-01-19 00:00:00
RHEL 6 : rhevm-spice-client (RHSA-2015:0197)
2015-09-01 00:00:00
cve
cve
CVE-2014-3511
2014-08-13 23:55:00
prion
prion
Design/Logic Flaw
2014-08-13 23:55:00
ibm
ibm
redhat
redhat
(RHSA-2015:0197) Moderate: rhevm-spice-client security and bug fix update
2014-07-25 00:00:00
(RHSA-2015:0126) Critical: rhev-hypervisor6 security update
2015-02-04 00:00:00
(RHSA-2014:1052) Moderate: openssl security update
2014-08-13 00:00:00
openvas
openvas
OpenSSL Multiple Vulnerabilities (20140806 - 2) - Windows
2021-07-19 00:00:00
OpenSSL Multiple Vulnerabilities (20140806 - 2) - Linux
2021-07-19 00:00:00
Oracle: Security Advisory (ELSA-2014-1052)
2015-10-06 00:00:00
oraclelinux
oraclelinux
openssl security update
2014-08-13 00:00:00
openssl security update
2014-10-16 00:00:00
openssl security update
2016-09-27 00:00:00
centos
centos
openssl security update
2014-08-13 20:10:43
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:18.openssl
2014-09-09 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-08-07 00:00:00
huawei
huawei
Security Advisory-9 OpenSSL vulnerabilities on Huawei products
2014-10-08 00:00:00
osv
osv
openssl - security update
2014-08-07 00:00:00
debian
debian
[SECURITY] [DSA 2998-1] openssl security update
2014-08-06 23:44:13
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2014-08-06 00:00:00
aix
aix
AIX OpenSSL Denial of Service due to double free and others
2014-09-09 00:50:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2014-08-12 13:16:46
amazon
amazon
Medium: openssl
2014-08-07 12:26:00
slackware
slackware
[slackware-security] openssl
2014-08-08 21:22:00
securityvulns
securityvulns
OpenSSL multiple security vulnerabilities
2014-08-07 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
kaspersky
kaspersky
KLA10343 Multiple vulnerabilities in Stunnel
2014-08-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1j-alt1
2014-10-30 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.1j-alt1
2014-10-30 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.1j-alt1
2014-10-30 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2014-12-26 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: openssl-1.0.1e-39.fc20
2014-08-09 07:36:05
[SECURITY] Fedora 19 Update: openssl-1.0.1e-39.fc19
2014-08-09 07:34:58
[SECURITY] Fedora 20 Update: mingw-openssl-1.0.1j-1.fc20
2015-01-02 05:03:10
citrix
citrix
4.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
80.3%
Related for OPENSSL:CVE-2014-3511