Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-3567
HistoryOct 15, 2014 - 12:00 a.m.

CVE-2014-3567

2014-10-1500:00:00
ubuntu.com
ubuntu.com
33

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.947 High

EPSS

Percentile

99.2%

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL
before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote
attackers to cause a denial of service (memory consumption) via a crafted
session ticket that triggers an integrity-check failure.

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchopenssl< 1.0.1f-1ubuntu9UNKNOWN
ubuntu18.04noarchopenssl< 1.0.1f-1ubuntu9UNKNOWN
ubuntu18.10noarchopenssl< 1.0.1f-1ubuntu9UNKNOWN
ubuntu19.04noarchopenssl< 1.0.1f-1ubuntu9UNKNOWN
ubuntu10.04noarchopenssl< 0.9.8k-7ubuntu8.22UNKNOWN
ubuntu12.04noarchopenssl< 1.0.1-4ubuntu5.20UNKNOWN
ubuntu14.04noarchopenssl< 1.0.1f-1ubuntu2.7UNKNOWN
ubuntu14.10noarchopenssl< 1.0.1f-1ubuntu9UNKNOWN
ubuntu15.04noarchopenssl< 1.0.1f-1ubuntu9UNKNOWN
ubuntu15.10noarchopenssl< 1.0.1f-1ubuntu9UNKNOWN
Rows per page:
1-10 of 131

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.947 High

EPSS

Percentile

99.2%