Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-3569
HistoryDec 24, 2014 - 12:00 a.m.

CVE-2014-3569

2014-12-2400:00:00
ubuntu.com
ubuntu.com
11

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.891 High

EPSS

Percentile

98.7%

JSON

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc,
1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported
protocols, which allows remote attackers to cause a denial of service (NULL
pointer dereference and daemon crash) via an unexpected handshake, as
demonstrated by an SSLv3 handshake to a no-ssl3 application with certain
error handling. NOTE: this issue became relevant after the CVE-2014-3568
fix.

Bugs

Notes

Author Note
mdeslaur Ubuntu packages aren’t compiled with no-ssl3, so aren’t actually vulnerable to this issue.
OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchopenssl< 1.0.1f-1ubuntu10UNKNOWN
ubuntu18.04noarchopenssl< 1.0.1f-1ubuntu10UNKNOWN
ubuntu18.10noarchopenssl< 1.0.1f-1ubuntu10UNKNOWN
ubuntu19.04noarchopenssl< 1.0.1f-1ubuntu10UNKNOWN
ubuntu10.04noarchopenssl< 0.9.8k-7ubuntu8.23UNKNOWN
ubuntu12.04noarchopenssl< 1.0.1-4ubuntu5.21UNKNOWN
ubuntu14.04noarchopenssl< 1.0.1f-1ubuntu2.8UNKNOWN
ubuntu14.10noarchopenssl< 1.0.1f-1ubuntu9.1UNKNOWN
ubuntu15.04noarchopenssl< 1.0.1f-1ubuntu10UNKNOWN
ubuntu15.10noarchopenssl< 1.0.1f-1ubuntu10UNKNOWN
Rows per page:
1-10 of 131

Related

prion 2
f5 4
cve 3
debiancve 2
veracode 2
osv 3
nessus 42
debian 4
openvas 27
checkpoint_advisories 1
ubuntucve 1
openssl 2
suse 8
ibm 69
amazon 2
securityvulns 6
archlinux 2
kaspersky 3
slackware 2
freebsd 2
freebsd_advisory 2
altlinux 6
vmware 2
cisco 1
mageia 1
prion
prion
Null pointer dereference
2014-12-24 11:59:00
Design/Logic Flaw
2014-10-19 01:55:00
f5
f5
SOL16013 - OpenSSL vulnerability CVE-2014-3569
2015-01-28 00:00:00
K16013 : OpenSSL vulnerability CVE-2014-3569
2015-01-29 00:00:00
SOL15724 - OpenSSL vulnerability CVE-2014-3568
2014-10-23 00:00:00
cve
cve
CVE-2014-3569
2014-12-24 11:59:00
CVE-2014-3568
2014-10-19 01:55:00
CVE-2015-3569
2016-04-26 10:59:00
debiancve
debiancve
CVE-2014-3569
2014-12-24 11:59:00
CVE-2014-3568
2014-10-19 01:55:00
veracode
veracode
Denial Of Service (DoS) Through Null Pointer Dereference
2017-02-06 08:21:22
Access Restriction Bypass
2017-02-06 08:45:07
osv
osv
openssl - security update
2014-11-01 00:00:00
openssl - security update
2014-10-16 00:00:00
openssl - security update
2015-01-11 00:00:00
nessus
nessus
Debian DLA-81-1 : openssl security update
2015-03-26 00:00:00
SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2014:1512-1) (POODLE)
2015-05-20 00:00:00
Amazon Linux AMI : openssl (ALAS-2014-427)
2014-10-16 00:00:00
debian
debian
[SECURITY] [DLA 81-1] openssl security update
2014-11-01 15:49:46
[SECURITY] [DSA 3053-1] openssl security update
2014-10-16 15:48:24
[SECURITY] [DSA 3125-1] openssl security update
2015-01-11 11:05:13
openvas
openvas
Debian: Security Advisory (DLA-81-1)
2023-03-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-469)
2015-09-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-427)
2015-09-08 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL ssl23_get_client_hello Function Denial of Service (CVE-2014-3569)
2015-01-12 00:00:00
ubuntucve
ubuntucve
CVE-2014-3568
2014-10-19 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2014-3569
2014-10-21 00:00:00
Vulnerability in OpenSSL CVE-2014-3568
2014-10-15 00:00:00
suse
suse
Security update for OpenSSL (important)
2014-11-12 19:05:00
Security update for OpenSSL (important)
2014-11-13 01:04:46
Security update for OpenSSL (important)
2014-11-05 23:04:47
ibm
ibm
Security Bulletin: Vulnerabilities in SSLv3 and OpenSSL affect System x Integrated Management Module (IMM1) (CVE-2014-3566, CVE-2014-3568)
2019-01-31 01:35:01
Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Information Server (CVE-2014-3567, CVE-2014-3568)
2018-06-16 14:07:30
Security Bulletin: Vulnerabilities in OpenSSL affect IBM MessageSight (CVE-2014-3569, CVE-2015-0205)
2018-06-17 15:12:14
amazon
amazon
Medium: openssl
2015-01-11 12:36:00
Important: openssl
2014-10-15 16:14:00
securityvulns
securityvulns
[slackware-security] openssl &#40;SSA:2014-288-01&#41;
2014-10-17 00:00:00
OpenSSL multiple security vulnerabilities
2014-12-09 00:00:00
OpenSSL multiple security vulnerabilities
2015-01-13 00:00:00
archlinux
archlinux
openssl: denial of service / man-in-the-middle / poodle mitigation
2014-10-16 00:00:00
openssl: multiple issues
2015-01-09 00:00:00
kaspersky
kaspersky
KLA10359 Vulnerability in Tableau
2014-07-18 00:00:00
KLA10460 Multiple vulnerabilities in OpenSSL
2015-01-08 00:00:00
KLA10452 Multiple vulnerabilities in VMware products
2015-01-27 00:00:00
slackware
slackware
[slackware-security] openssl
2014-10-15 17:58:22
[slackware-security] openssl
2015-01-09 18:34:39
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2014-10-15 00:00:00
OpenSSL -- multiple vulnerabilities
2015-01-08 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:23.openssl
2014-10-21 00:00:00
FreeBSD-SA-15:01.openssl
2015-01-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt1
2015-01-12 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt1
2015-01-12 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt0.M70P.1
2015-01-12 00:00:00
vmware
vmware
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
2015-01-27 00:00:00
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
2015-01-27 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
2015-03-10 16:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2015-01-11 22:54:28

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.891 High

EPSS

Percentile

98.7%

JSON
Related for UB:CVE-2014-3569
prion2f54cve3debiancve2veracode2osv3nessus42debian4openvas27checkpoint_advisories1ubuntucve1openssl2suse8ibm69amazon2securityvulns6archlinux2kaspersky3slackware2freebsd2freebsd_advisory2altlinux6vmware2cisco1mageia1