Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2014-3510
HistoryAug 13, 2014 - 11:55 p.m.

CVE-2014-3510

2014-08-1323:55:07
redhat
web.nvd.nist.gov
88
openssl
vulnerability
remote
denial of service
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

5.5

Confidence

Low

EPSS

0.016

Percentile

87.4%

JSON

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake message in conjunction with a (1) anonymous DH or (2) anonymous ECDH ciphersuite.

Affected configurations

Nvd
Node
opensslopensslMatch0.9.8
OR
opensslopensslMatch0.9.8a
OR
opensslopensslMatch0.9.8b
OR
opensslopensslMatch0.9.8c
OR
opensslopensslMatch0.9.8d
OR
opensslopensslMatch0.9.8e
OR
opensslopensslMatch0.9.8f
OR
opensslopensslMatch0.9.8g
OR
opensslopensslMatch0.9.8h
OR
opensslopensslMatch0.9.8i
OR
opensslopensslMatch0.9.8j
OR
opensslopensslMatch0.9.8k
OR
opensslopensslMatch0.9.8l
OR
opensslopensslMatch0.9.8m
OR
opensslopensslMatch0.9.8mbeta1
OR
opensslopensslMatch0.9.8n
OR
opensslopensslMatch0.9.8o
OR
opensslopensslMatch0.9.8p
OR
opensslopensslMatch0.9.8q
OR
opensslopensslMatch0.9.8r
OR
opensslopensslMatch0.9.8s
OR
opensslopensslMatch0.9.8t
OR
opensslopensslMatch0.9.8u
OR
opensslopensslMatch0.9.8v
OR
opensslopensslMatch0.9.8w
OR
opensslopensslMatch0.9.8x
OR
opensslopensslMatch0.9.8y
OR
opensslopensslMatch0.9.8za
OR
opensslopensslMatch1.0.0
OR
opensslopensslMatch1.0.0beta1
OR
opensslopensslMatch1.0.0beta2
OR
opensslopensslMatch1.0.0beta3
OR
opensslopensslMatch1.0.0beta4
OR
opensslopensslMatch1.0.0beta5
OR
opensslopensslMatch1.0.0a
OR
opensslopensslMatch1.0.0b
OR
opensslopensslMatch1.0.0c
OR
opensslopensslMatch1.0.0d
OR
opensslopensslMatch1.0.0e
OR
opensslopensslMatch1.0.0f
OR
opensslopensslMatch1.0.0g
OR
opensslopensslMatch1.0.0h
OR
opensslopensslMatch1.0.0i
OR
opensslopensslMatch1.0.0j
OR
opensslopensslMatch1.0.0k
OR
opensslopensslMatch1.0.0l
OR
opensslopensslMatch1.0.0m
OR
opensslopensslMatch1.0.1
OR
opensslopensslMatch1.0.1beta1
OR
opensslopensslMatch1.0.1beta2
OR
opensslopensslMatch1.0.1beta3
OR
opensslopensslMatch1.0.1a
OR
opensslopensslMatch1.0.1b
OR
opensslopensslMatch1.0.1c
OR
opensslopensslMatch1.0.1d
OR
opensslopensslMatch1.0.1e
OR
opensslopensslMatch1.0.1f
OR
opensslopensslMatch1.0.1g
OR
opensslopensslMatch1.0.1h
VendorProductVersionCPE
opensslopenssl0.9.8cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*
opensslopenssl0.9.8acpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*
opensslopenssl0.9.8bcpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*
opensslopenssl0.9.8ccpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*
opensslopenssl0.9.8dcpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*
opensslopenssl0.9.8ecpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*
opensslopenssl0.9.8fcpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*
opensslopenssl0.9.8gcpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*
opensslopenssl0.9.8hcpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*
opensslopenssl0.9.8icpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*
Rows per page:
1-10 of 591

References

Related

f5 2
veracode 1
ubuntucve 1
nessus 46
debiancve 1
nvd 1
openssl 1
checkpoint_advisories 1
cvelist 1
prion 1
openvas 32
centos 2
ibm 30
debian 2
redhat 3
oraclelinux 8
freebsd_advisory 1
osv 3
ubuntu 1
huawei 1
kaspersky 1
securityvulns 2
slackware 1
aix 1
mageia 1
freebsd 1
amazon 1
fedora 8
altlinux 5
gentoo 1
suse 1
lenovo 2
f5
f5
K15568 : OpenSSL vulnerability CVE-2014-3510
2015-09-11 00:00:00
SOL15568 - OpenSSL vulnerability CVE-2014-3510
2014-09-05 00:00:00
veracode
veracode
Denial Of Service (DoS) Through Null Pointer Dereference
2017-02-07 01:02:25
ubuntucve
ubuntucve
CVE-2014-3510
2014-08-07 00:00:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (SOL15568)
2014-10-10 00:00:00
SuSE 11.3 Security Update : OpenSSL (SAT Patch Number 9598)
2014-08-21 00:00:00
Scientific Linux Security Update : openssl on SL5.x i386/x86_64 (20140813)
2014-08-15 00:00:00
debiancve
debiancve
CVE-2014-3510
2014-08-13 23:55:07
nvd
nvd
CVE-2014-3510
2014-08-13 23:55:07
openssl
openssl
Vulnerability in OpenSSL - OpenSSL DTLS anonymous EC(DH) denial of service
2014-08-06 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL DTLS Anonymous ECDH Denial of Service (CVE-2014-3510)
2015-02-04 00:00:00
cvelist
cvelist
CVE-2014-3510
2014-08-13 23:00:00
prion
prion
Null pointer dereference
2014-08-13 23:55:00
openvas
openvas
CentOS Update for openssl CESA-2014:1053 centos5
2014-08-14 00:00:00
OpenSSL Multiple Vulnerabilities (20140806 - 1) - Linux
2021-07-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1049-1)
2021-06-09 00:00:00
centos
centos
openssl security update
2014-08-13 19:52:24
openssl security update
2014-08-13 20:10:43
ibm
ibm
Security Bulletin: Multiple vulnerabilities in OpenSSL affect MegaRAID Storage Manager (CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3567)
2019-01-31 01:55:01
Security Bulletin: Vulnerability in Open SSL affects IBM System Networking products
2019-01-31 01:45:01
Security Bulletin: Network Protection is affected by multiple OpenSSL vulnerabilities (CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3511)
2018-06-16 21:19:45
debian
debian
[DLA 33-1] openssl security update
2014-08-07 20:36:09
[SECURITY] [DSA 2998-1] openssl security update
2014-08-06 23:44:13
redhat
redhat
(RHSA-2014:1053) Moderate: openssl security update
2014-08-13 00:00:00
(RHSA-2014:1054) Moderate: openssl security update
2014-08-14 00:00:00
(RHSA-2014:1052) Moderate: openssl security update
2014-08-13 00:00:00
oraclelinux
oraclelinux
openssl security update
2014-08-13 00:00:00
openssl security update
2014-10-16 00:00:00
openssl security update
2014-08-13 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:18.openssl
2014-09-09 00:00:00
osv
osv
openssl - security update
2014-08-07 00:00:00
libcrypto38-2.5.0-1.1 on GA media
2024-06-15 00:00:00
libopenssl-1_1-devel-1.1.1l-1.2 on GA media
2024-06-15 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-08-07 00:00:00
huawei
huawei
Security Advisory-9 OpenSSL vulnerabilities on Huawei products
2014-10-08 00:00:00
kaspersky
kaspersky
KLA10343 Multiple vulnerabilities in Stunnel
2014-08-07 00:00:00
securityvulns
securityvulns
OpenSSL multiple security vulnerabilities
2014-08-07 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
slackware
slackware
[slackware-security] openssl
2014-08-08 21:22:00
aix
aix
AIX OpenSSL Denial of Service due to double free and others
2014-09-09 00:50:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2014-08-12 13:16:46
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2014-08-06 00:00:00
amazon
amazon
Medium: openssl
2014-08-07 12:26:00
fedora
fedora
[SECURITY] Fedora 21 Update: mingw-openssl-1.0.1j-1.fc21
2015-01-02 05:06:53
[SECURITY] Fedora 20 Update: openssl-1.0.1e-39.fc20
2014-08-09 07:36:05
[SECURITY] Fedora 19 Update: openssl-1.0.1e-39.fc19
2014-08-09 07:34:58
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1j-alt1
2014-10-30 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.1j-alt1
2014-10-30 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1j-alt1
2014-10-30 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2014-12-26 00:00:00
suse
suse
Security update for libopenssl0_9_8 (important)
2016-03-03 14:11:44
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

5.5

Confidence

Low

EPSS

0.016

Percentile

87.4%

JSON
Related for CVE-2014-3510
f52veracode1ubuntucve1nessus46debiancve1nvd1openssl1checkpoint_advisories1cvelist1prion1openvas32centos2ibm30debian2redhat3oraclelinux8freebsd_advisory1osv3ubuntu1huawei1kaspersky1securityvulns2slackware1aix1mageia1freebsd1amazon1fedora8altlinux5gentoo1suse1lenovo2