An OpenSSL client will accept a handshake using an ephemeral ECDH ciphersuite using an ECDSA certificate if the server key exchange message is omitted. This effectively removes forward secrecy from the ciphersuite.

checkpoint_advisories 1

prion 2

nessus 47

f5 2

cve 3

debiancve 1

ubuntucve 1

veracode 1

ibm 57

oraclelinux 10

openvas 33

debian 3

osv 2

ubuntu 1

centos 1

redhat 1

securityvulns 9

aix 1

suse 5

altlinux 6

archlinux 1

kaspersky 1

slackware 1

freebsd_advisory 1

cisco 1

freebsd 1

mageia 1

amazon 1

fedora 2

citrix 1

oracle 1

checkpoint_advisories

OpenSSL Ephemeral ECDH Cipher Suite Handshake Downgrade (CVE-2014-3572)

2015-01-07 00:00:00

prion

Code injection

2015-01-09 02:59:00

Code injection

2015-08-20 10:59:00

nessus

F5 Networks BIG-IP : OpenSSL vulnerability (SOL16126)

2015-02-18 00:00:00

Splunk Enterprise 6.2.x < 6.2.2 Multiple Vulnerabilities (FREAK)

2015-03-13 00:00:00

MS KB3062760: Update for Vulnerability in Juniper Networks Windows In-Box Junos Pulse Client (FREAK)

2015-06-09 00:00:00

K16126 : OpenSSL vulnerability CVE-2014-3572

2015-09-16 00:00:00

SOL16126 - OpenSSL vulnerability CVE-2014-3572

2015-02-12 00:00:00

cve

CVE-2014-3572

2015-01-09 02:59:00

CVE-2015-3572

2016-04-26 10:59:00

CVE-2015-0533

2015-08-20 10:59:00

debiancve

CVE-2014-3572

2015-01-09 02:59:00

ubuntucve

CVE-2014-3572

2015-01-08 00:00:00

veracode

ECDHE-to-ECDH Downgrade Attacks

2017-02-06 06:25:54

ibm

Security Bulletin: Vulnerabilities in OpenSSL affect IBM WebSphere Cast Iron Solution(CVE-2014-3572,CVE-2015-0204,CVE-2014-8275)

2018-06-15 07:02:34

Security Bulletin: Vulnerabilities in OpenSSL affect Rational ClearQuest (CVE-2014-3570, CVE-2014-3572, CVE-2015-0204)

2018-09-29 18:04:03

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Worklight and IBM MobileFirst Platform Foundation (CVE-2014-3570, CVE-2014-3572, CVE-2015-0204)

2018-06-17 22:31:21

oraclelinux

openssl security update

2015-12-14 00:00:00

openssl security update

2016-05-31 00:00:00

openssl security update

2015-02-26 00:00:00

openvas

Oracle: Security Advisory (ELSA-2015-2616)

2015-12-15 00:00:00

Oracle: Security Advisory (ELSA-2015-3010)

2015-10-06 00:00:00

SUSE: Security Advisory (SUSE-SU-2015:0182-1)

2021-06-09 00:00:00

debian

[SECURITY] [DLA 132-1] openssl security update

2015-01-11 13:16:17

[SECURITY] [DSA 3125-1] openssl security update

2015-01-11 11:05:13

[SECURITY] [DSA 3125-1] openssl security update

2015-01-11 11:05:13

osv

openssl - security update

2015-01-11 00:00:00

openssl - security update

2015-01-11 00:00:00

ubuntu

OpenSSL vulnerabilities

2015-01-12 00:00:00

centos

openssl security update

2015-01-20 21:00:39

redhat

(RHSA-2015:0066) Moderate: openssl security update

2015-01-20 00:00:00

securityvulns

[USN-2459-1] OpenSSL vulnerabilities

2015-01-13 00:00:00

OpenSSL multiple security vulnerabilities

2015-01-13 00:00:00

ESA-2015-081: RSA BSAFE® Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities

2015-08-24 00:00:00

aix

Multiple Security vulnerabilities in AIX OpenSSL

2015-02-04 06:24:41

suse

Security update for openssl (important)

2015-01-23 20:05:13

Security update for libressl (important)

2015-07-22 15:08:14

Security update for compat-openssl097g (important)

2015-03-24 00:05:09

altlinux

Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt1

2015-01-12 00:00:00

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt1

2015-01-12 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt0.M70P.1

2015-01-12 00:00:00

archlinux

openssl: multiple issues

2015-01-09 00:00:00

kaspersky

KLA10460 Multiple vulnerabilities in OpenSSL

2015-01-08 00:00:00

slackware

[slackware-security] openssl

2015-01-09 18:34:39

freebsd_advisory

FreeBSD-SA-15:01.openssl

2015-01-14 00:00:00

cisco

Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products

2015-03-10 16:00:00

freebsd

OpenSSL -- multiple vulnerabilities

2015-01-08 00:00:00

mageia

Updated openssl packages fix security vulnerabilities

2015-01-11 22:54:28

amazon

Medium: openssl

2015-01-11 12:36:00

fedora

[SECURITY] Fedora 20 Update: openssl-1.0.1e-41.fc20

2015-01-20 21:05:44

[SECURITY] Fedora 20 Update: openssl-1.0.1e-42.fc20

2015-03-23 07:18:26

citrix

Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Lights Out Management (LOM) firmware

2016-09-08 04:00:00

oracle

Oracle Critical Patch Update - April 2015

2015-04-14 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

6.7 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.047 Low

EPSS

Percentile

92.5%

JSON

Related for OPENSSL:CVE-2014-3572