Lucene search
Ubuntu.comUB:CVE-2013-4353HistoryJan 06, 2014 - 12:00 a.m.
CVE-2013-4353
2014-01-0600:00:00
ubuntu.com
ubuntu.com
9
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.542 Medium
EPSS
Percentile
97.6%
The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f
allows remote TLS servers to cause a denial of service (NULL pointer
dereference and application crash) via a crafted Next Protocol Negotiation
record in a TLS handshake.
Notes
| Author | Note |
|---|---|
| mdeslaur | only affected 1.0.1+ |
Related
nessus
nessus
Debian DSA-2837-1 : openssl - programming error
2014-01-08 00:00:00
openSUSE Security Update : openssl (openSUSE-SU-2014:0096-1)
2014-06-13 00:00:00
GLSA-201402-25 : OpenSSL: Denial of Service
2014-02-23 00:00:00
f5
f5
K15180 : OpenSSL vulnerability CVE-2013-4353
2014-04-17 00:00:00
SOL15180 - OpenSSL vulnerability CVE-2013-4353
2014-04-17 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201402-25
2015-09-29 00:00:00
Debian Security Advisory DSA 2837-1 (openssl - programming error)
2014-01-07 00:00:00
Debian: Security Advisory (DSA-2837-1)
2014-01-06 00:00:00
cve
cve
CVE-2013-4353
2014-01-09 01:55:00
prion
prion
Null pointer dereference
2014-01-09 01:55:00
veracode
veracode
Denial Of Service (DoS) Through Null Pointer Dereference
2019-01-15 08:54:56
Denial Of Service (DoS) Through Null Pointer Dereference
2017-02-08 05:45:38
debiancve
debiancve
CVE-2013-4353
2014-01-09 01:55:00
debian
debian
[SECURITY] [DSA 2837-1] openssl security update
2014-01-07 15:41:18
gentoo
gentoo
OpenSSL: Denial of service
2014-02-21 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2013-4353
2014-01-06 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL TLS Record Tampering Denial of Service (CVE-2013-4353)
2014-03-26 00:00:00
ibm
ibm
mageia
mageia
Updated openssl package fixes security vulnerabilities
2014-01-17 04:33:19
freebsd
freebsd
openssl -- multiple vulnerabilities
2014-01-06 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-01-09 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1f-alt1
2014-01-06 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1f-alt1
2014-01-06 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.1f-alt1
2014-01-06 00:00:00
slackware
slackware
openssl
2014-01-13 22:30:19
aix
aix
Multiple OpenSSL vulnerabilities
2014-02-25 14:07:48
centos
centos
openssl security update
2014-01-08 22:59:22
redhat
redhat
(RHSA-2014:0015) Important: openssl security update
2014-01-08 00:00:00
(RHSA-2014:0416) Important: rhevm-spice-client security update
2014-04-17 00:00:00
(RHSA-2014:0041) Important: rhev-hypervisor6 security update
2014-01-21 00:00:00
oraclelinux
oraclelinux
openssl security update
2014-01-08 00:00:00
openssl security update
2014-10-16 00:00:00
openssl-fips security update
2015-04-02 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: mingw-openssl-1.0.1e-5.fc20
2014-01-28 04:44:00
[SECURITY] Fedora 19 Update: mingw-openssl-1.0.1e-5.fc19
2014-02-04 02:52:09
[SECURITY] Fedora 20 Update: openssl-1.0.1e-37.fc20
2014-01-10 07:58:51
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:03.openssl
2014-01-14 00:00:00
securityvulns
securityvulns
OpenSSL security vulnerabilities
2014-01-08 00:00:00
amazon
amazon
Important: openssl
2014-01-14 15:56:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.542 Medium
EPSS
Percentile
97.6%
Related for UB:CVE-2013-4353