Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-3506
HistoryAug 07, 2014 - 12:00 a.m.

CVE-2014-3506

2014-08-0700:00:00
ubuntu.com
ubuntu.com
10

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.919 High

EPSS

Percentile

98.9%

JSON

d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0
before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a
denial of service (memory consumption) via crafted DTLS handshake messages
that trigger memory allocations corresponding to large length values.

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchopenssl< 1.0.1f-1ubuntu7UNKNOWN
ubuntu18.04noarchopenssl< 1.0.1f-1ubuntu7UNKNOWN
ubuntu18.10noarchopenssl< 1.0.1f-1ubuntu7UNKNOWN
ubuntu19.04noarchopenssl< 1.0.1f-1ubuntu7UNKNOWN
ubuntu10.04noarchopenssl< 0.9.8k-7ubuntu8.20UNKNOWN
ubuntu12.04noarchopenssl< 1.0.1-4ubuntu5.17UNKNOWN
ubuntu14.04noarchopenssl< 1.0.1f-1ubuntu2.5UNKNOWN
ubuntu14.10noarchopenssl< 1.0.1f-1ubuntu7UNKNOWN
ubuntu15.04noarchopenssl< 1.0.1f-1ubuntu7UNKNOWN
ubuntu15.10noarchopenssl< 1.0.1f-1ubuntu7UNKNOWN
Rows per page:
1-10 of 131

Related

checkpoint_advisories 2
veracode 1
prion 1
openssl 1
debiancve 1
cve 1
f5 2
ibm 30
nessus 43
redhat 3
openvas 32
centos 2
debian 2
oraclelinux 8
freebsd_advisory 1
amazon 1
aix 1
mageia 1
freebsd 1
osv 1
slackware 1
huawei 1
ubuntu 1
securityvulns 2
kaspersky 1
fedora 8
gentoo 1
altlinux 5
suse 1
lenovo 2
checkpoint_advisories
checkpoint_advisories
OpenSSL DTLS Handshake Memory Exhaustion (CVE-2014-3506)
2014-09-28 00:00:00
OpenSSL DTLS Handshake Memory Exhaustion - ver 2 (CVE-2014-3506)
2014-09-28 00:00:00
veracode
veracode
Denial Of Service (DoS) Through Memory Consumption
2017-02-07 01:31:35
prion
prion
Design/Logic Flaw
2014-08-13 23:55:00
openssl
openssl
Vulnerability in OpenSSL CVE-2014-3506
2014-08-06 00:00:00
debiancve
debiancve
CVE-2014-3506
2014-08-13 23:55:00
cve
cve
CVE-2014-3506
2014-08-13 23:55:00
f5
f5
K15573 : OpenSSL DTLS vulnerabilities CVE-2014-3505, CVE-2014-3506, and CVE-2014-3507
2015-09-15 00:00:00
SOL15573 - OpenSSL DTLS vulnerabilities CVE-2014-3505, CVE-2014-3506, and CVE-2014-3507
2014-09-05 00:00:00
ibm
ibm
Security Bulletin: Network Protection is affected by multiple OpenSSL vulnerabilities (CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3511)
2018-06-16 21:19:45
Security Bulletin: Vulnerability in Open SSL affects IBM System Networking products
2019-01-31 01:45:01
Security Bulletin: Multiple vulnerabilities in OpenSSL affect MegaRAID Storage Manager (CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3567)
2019-01-31 01:55:01
nessus
nessus
RHEL 5 : openssl (RHSA-2014:1053)
2014-08-14 00:00:00
Oracle Linux 5 : openssl (ELSA-2014-1053)
2014-08-14 00:00:00
OpenSSL 0.9.8 < 0.9.8zb Multiple Vulnerabilities
2014-08-08 00:00:00
redhat
redhat
(RHSA-2014:1053) Moderate: openssl security update
2014-08-13 00:00:00
(RHSA-2014:1052) Moderate: openssl security update
2014-08-13 00:00:00
(RHSA-2014:1054) Moderate: openssl security update
2014-08-14 00:00:00
openvas
openvas
OpenSSL Multiple Vulnerabilities (20140806 - 1) - Windows
2021-07-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1104-1)
2021-06-09 00:00:00
RedHat Update for openssl RHSA-2014:1053-01
2014-08-14 00:00:00
centos
centos
openssl security update
2014-08-13 19:52:24
openssl security update
2014-08-13 20:10:43
debian
debian
[DLA 33-1] openssl security update
2014-08-07 20:36:09
[SECURITY] [DSA 2998-1] openssl security update
2014-08-06 23:44:13
oraclelinux
oraclelinux
openssl security update
2014-08-13 00:00:00
openssl security update
2014-08-13 00:00:00
openssl security update
2014-10-16 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:18.openssl
2014-09-09 00:00:00
amazon
amazon
Medium: openssl
2014-08-07 12:26:00
aix
aix
AIX OpenSSL Denial of Service due to double free and others
2014-09-09 00:50:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2014-08-12 13:16:46
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2014-08-06 00:00:00
osv
osv
openssl - security update
2014-08-07 00:00:00
slackware
slackware
[slackware-security] openssl
2014-08-08 21:22:00
huawei
huawei
Security Advisory-9 OpenSSL vulnerabilities on Huawei products
2014-10-08 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-08-07 00:00:00
securityvulns
securityvulns
OpenSSL multiple security vulnerabilities
2014-08-07 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
kaspersky
kaspersky
KLA10343 Multiple vulnerabilities in Stunnel
2014-08-07 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: mingw-openssl-1.0.1j-1.fc21
2015-01-02 05:06:53
[SECURITY] Fedora 20 Update: openssl-1.0.1e-39.fc20
2014-08-09 07:36:05
[SECURITY] Fedora 19 Update: openssl-1.0.1e-39.fc19
2014-08-09 07:34:58
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2014-12-26 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1j-alt1
2014-10-30 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.1j-alt1
2014-10-30 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.1j-alt1
2014-10-30 00:00:00
suse
suse
Security update for libopenssl0_9_8 (important)
2016-03-03 14:11:44
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.919 High

EPSS

Percentile

98.9%

JSON
Related for UB:CVE-2014-3506
checkpoint_advisories2veracode1prion1openssl1debiancve1cve1f52ibm30nessus43redhat3openvas32centos2debian2oraclelinux8freebsd_advisory1amazon1aix1mageia1freebsd1osv1slackware1huawei1ubuntu1securityvulns2kaspersky1fedora8gentoo1altlinux5suse1lenovo2