Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:3462
HistoryFeb 06, 2017 - 8:21 a.m.

Denial Of Service (DoS) Through Null Pointer Dereference

2017-02-0608:21:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

OpenSSL is vulnerable to denial of service (DoS) attacks through a null pointer dereference and daemon crash. This is because there is an unexpected handshake during the unsupported protocols. NOTE: this issue became relevant after the CVE-2014-3568 fix.

CPENameOperatorVersion
openssleq1.0.110

References

Related

f5 4
debiancve 2
cve 3
prion 2
ubuntucve 2
osv 3
nessus 42
debian 4
openvas 27
checkpoint_advisories 1
openssl 2
veracode 1
ibm 69
suse 8
amazon 2
securityvulns 6
archlinux 2
kaspersky 3
slackware 2
freebsd 2
freebsd_advisory 2
vmware 2
altlinux 6
cisco 1
mageia 1
f5
f5
SOL16013 - OpenSSL vulnerability CVE-2014-3569
2015-01-28 00:00:00
K16013 : OpenSSL vulnerability CVE-2014-3569
2015-01-29 00:00:00
SOL15724 - OpenSSL vulnerability CVE-2014-3568
2014-10-23 00:00:00
debiancve
debiancve
CVE-2014-3569
2014-12-24 11:59:00
CVE-2014-3568
2014-10-19 01:55:00
cve
cve
CVE-2014-3569
2014-12-24 11:59:00
CVE-2014-3568
2014-10-19 01:55:00
CVE-2015-3569
2016-04-26 10:59:00
prion
prion
Null pointer dereference
2014-12-24 11:59:00
Design/Logic Flaw
2014-10-19 01:55:00
ubuntucve
ubuntucve
CVE-2014-3569
2014-12-24 00:00:00
CVE-2014-3568
2014-10-19 00:00:00
osv
osv
openssl - security update
2014-11-01 00:00:00
openssl - security update
2014-10-16 00:00:00
openssl - security update
2015-01-11 00:00:00
nessus
nessus
Debian DLA-81-1 : openssl security update
2015-03-26 00:00:00
Amazon Linux AMI : openssl (ALAS-2015-469) (FREAK)
2015-01-13 00:00:00
OpenSSL 1.0.0 < 1.0.1o Multiple Vulnerabilities (POODLE)
2014-10-17 00:00:00
debian
debian
[SECURITY] [DLA 81-1] openssl security update
2014-11-01 15:49:46
[SECURITY] [DSA 3053-1] openssl security update
2014-10-16 15:48:24
[SECURITY] [DSA 3125-1] openssl security update
2015-01-11 11:05:13
openvas
openvas
Debian: Security Advisory (DLA-81-1)
2023-03-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-469)
2015-09-08 00:00:00
OpenSSL Multiple Vulnerabilities (20141015) - Linux
2021-07-19 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL ssl23_get_client_hello Function Denial of Service (CVE-2014-3569)
2015-01-12 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2014-3569
2014-10-21 00:00:00
Vulnerability in OpenSSL CVE-2014-3568
2014-10-15 00:00:00
veracode
veracode
Access Restriction Bypass
2017-02-06 08:45:07
ibm
ibm
Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Information Server (CVE-2014-3567, CVE-2014-3568)
2018-06-16 14:07:30
Security Bulletin: Vulnerabilities in OpenSSL affect IBM MessageSight (CVE-2014-3569, CVE-2015-0205)
2018-06-17 15:12:14
Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cognos TM1 including a vulnerabiltiy in the RC4 stream ciphers (CVE-2015-2808, CVE-2014-3569).
2018-06-15 22:36:55
suse
suse
Security update for OpenSSL (important)
2014-11-12 19:05:00
Security update for OpenSSL (important)
2014-11-05 23:04:47
Security update for OpenSSL (important)
2014-11-13 01:04:46
amazon
amazon
Medium: openssl
2015-01-11 12:36:00
Important: openssl
2014-10-15 16:14:00
securityvulns
securityvulns
[slackware-security] openssl &#40;SSA:2014-288-01&#41;
2014-10-17 00:00:00
OpenSSL multiple security vulnerabilities
2014-12-09 00:00:00
OpenSSL multiple security vulnerabilities
2015-01-13 00:00:00
archlinux
archlinux
openssl: denial of service / man-in-the-middle / poodle mitigation
2014-10-16 00:00:00
openssl: multiple issues
2015-01-09 00:00:00
kaspersky
kaspersky
KLA10359 Vulnerability in Tableau
2014-07-18 00:00:00
KLA10460 Multiple vulnerabilities in OpenSSL
2015-01-08 00:00:00
KLA10452 Multiple vulnerabilities in VMware products
2015-01-27 00:00:00
slackware
slackware
[slackware-security] openssl
2014-10-15 17:58:22
[slackware-security] openssl
2015-01-09 18:34:39
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2014-10-15 00:00:00
OpenSSL -- multiple vulnerabilities
2015-01-08 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:23.openssl
2014-10-21 00:00:00
FreeBSD-SA-15:01.openssl
2015-01-14 00:00:00
vmware
vmware
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
2015-01-27 00:00:00
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
2015-01-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt1
2015-01-12 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt0.M70P.1
2015-01-12 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 1.0.0p-alt0.M60P.1
2015-04-23 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
2015-03-10 16:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2015-01-11 22:54:28

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON
Related for VERACODE:3462
f54debiancve2cve3prion2ubuntucve2osv3nessus42debian4openvas27checkpoint_advisories1openssl2veracode1ibm69suse8amazon2securityvulns6archlinux2kaspersky3slackware2freebsd2freebsd_advisory2vmware2altlinux6cisco1mageia1