Man-in-the-Middle (MitM)

OpenSSL is vulnerable to man in the middle MitM attacks. These attacks are possible through the ssl23getclienthello function in s23srvr.c. It can be triggered by a ClientHello message fragment which forces OpenSSL to negotiate using the TLS 1.0 protocol insteadl of a higher, more secure version...

The vulnerability of the MySQL database management system allows a remote attacker to cause a service failure.

The vulnerability in the MySQL database management system’s ssl23getclienthello function in the s23srvr.c file of the OpenSSL cryptographic library lies in the improper implementation of outdated protocols. Exploiting this vulnerability allows a malicious actor to cause service interruptions such...

OpenSSL ssl23_get_client_hello Function Denial of Service (CVE-2014-3569)

A denial of service vulnerability exists in the OpenSSL library compiled with no-ssl3. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted handshake to the target application and cause it to terminate...

CVE-2014-3569: Undefined Security Weakness

The ssl23getclienthello function in s23srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an unexpected handshake, as demonstrated by...

CVE-2014-3511: Undefined Security Weakness

The ssl23getclienthello function in s23srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a "protocol...