Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2014-3568
HistoryOct 19, 2014 - 1:55 a.m.

CVE-2014-3568

2014-10-1901:55:13
CWE-310
redhat
web.nvd.nist.gov
102
openssl
cve-2014-3568
access restriction bypass
nvd
vulnerability
ssl 3.0

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

4.5

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.

Affected configurations

Nvd
Node
opensslopensslRange≤0.9.8zb
OR
opensslopensslMatch1.0.0
OR
opensslopensslMatch1.0.0beta1
OR
opensslopensslMatch1.0.0beta2
OR
opensslopensslMatch1.0.0beta3
OR
opensslopensslMatch1.0.0beta4
OR
opensslopensslMatch1.0.0beta5
OR
opensslopensslMatch1.0.0a
OR
opensslopensslMatch1.0.0b
OR
opensslopensslMatch1.0.0c
OR
opensslopensslMatch1.0.0d
OR
opensslopensslMatch1.0.0e
OR
opensslopensslMatch1.0.0f
OR
opensslopensslMatch1.0.0g
OR
opensslopensslMatch1.0.0h
OR
opensslopensslMatch1.0.0i
OR
opensslopensslMatch1.0.0j
OR
opensslopensslMatch1.0.0k
OR
opensslopensslMatch1.0.0l
OR
opensslopensslMatch1.0.0m
OR
opensslopensslMatch1.0.0n
OR
opensslopensslMatch1.0.1
OR
opensslopensslMatch1.0.1beta1
OR
opensslopensslMatch1.0.1beta2
OR
opensslopensslMatch1.0.1beta3
OR
opensslopensslMatch1.0.1a
OR
opensslopensslMatch1.0.1b
OR
opensslopensslMatch1.0.1c
OR
opensslopensslMatch1.0.1d
OR
opensslopensslMatch1.0.1e
OR
opensslopensslMatch1.0.1f
OR
opensslopensslMatch1.0.1g
OR
opensslopensslMatch1.0.1h
OR
opensslopensslMatch1.0.1i
VendorProductVersionCPE
opensslopenssl*cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
opensslopenssl1.0.0cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*
opensslopenssl1.0.0cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*
opensslopenssl1.0.0cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*
opensslopenssl1.0.0cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*
opensslopenssl1.0.0cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*
opensslopenssl1.0.0cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*
opensslopenssl1.0.0acpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*
opensslopenssl1.0.0bcpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*
opensslopenssl1.0.0ccpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*
Rows per page:
1-10 of 341

References

Related

f5 4
ubuntucve 2
debiancve 2
cvelist 2
prion 2
nvd 2
veracode 2
openssl 1
ibm 49
suse 9
nessus 36
cve 1
openvas 21
amazon 2
securityvulns 7
freebsd_advisory 1
slackware 1
freebsd 1
debian 2
osv 3
kaspersky 2
archlinux 1
vmware 2
altlinux 5
gentoo 1
f5
f5
SOL15724 - OpenSSL vulnerability CVE-2014-3568
2014-10-23 00:00:00
K15724 : OpenSSL vulnerability CVE-2014-3568
2014-10-23 00:00:00
K16013 : OpenSSL vulnerability CVE-2014-3569
2015-01-29 00:00:00
ubuntucve
ubuntucve
CVE-2014-3568
2014-10-19 00:00:00
CVE-2014-3569
2014-12-24 00:00:00
debiancve
debiancve
CVE-2014-3568
2014-10-19 01:55:13
CVE-2014-3569
2014-12-24 11:59:00
cvelist
cvelist
CVE-2014-3568
2014-10-19 01:00:00
CVE-2014-3569
2014-12-24 11:00:00
prion
prion
Design/Logic Flaw
2014-10-19 01:55:00
Null pointer dereference
2014-12-24 11:59:00
nvd
nvd
CVE-2014-3568
2014-10-19 01:55:13
CVE-2014-3569
2014-12-24 11:59:00
veracode
veracode
Access Restriction Bypass
2017-02-06 08:45:07
Denial Of Service (DoS) Through Null Pointer Dereference
2017-02-06 08:21:22
openssl
openssl
Vulnerability in OpenSSL - Build option no-ssl3 is incomplete
2014-10-15 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in SSLv3 and OpenSSL affect System x Integrated Management Module (IMM1) (CVE-2014-3566, CVE-2014-3568)
2019-01-31 01:35:01
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Message Broker shipped with IBM WebSphere Remote Server (CVE-2014-3566 and CVE-ID: CVE-2014-3568)
2018-06-15 07:02:03
Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Information Server (CVE-2014-3567, CVE-2014-3568)
2018-06-16 14:07:30
suse
suse
Security update for OpenSSL (important)
2014-11-12 19:05:00
Security update for OpenSSL (important)
2014-11-13 01:04:46
Security update for OpenSSL (important)
2014-11-11 01:04:46
nessus
nessus
OpenSSL 0.9.8 < 0.9.8zc Multiple Vulnerabilities
2014-10-17 00:00:00
OpenSSL 1.0.0 < 1.0.0o Multiple Vulnerabilities
2014-10-17 00:00:00
Amazon Linux AMI : openssl (ALAS-2014-427)
2014-10-16 00:00:00
cve
cve
CVE-2014-3569
2014-12-24 11:59:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:1361-1)
2021-06-09 00:00:00
SUSE: Security Advisory for OpenSSL (SUSE-SU-2014:1361-1)
2015-10-13 00:00:00
OpenSSL Multiple Vulnerabilities (20141015) - Windows
2021-07-19 00:00:00
amazon
amazon
Important: openssl
2014-10-15 16:14:00
Medium: openssl
2015-01-11 12:36:00
securityvulns
securityvulns
[slackware-security] openssl &#40;SSA:2014-288-01&#41;
2014-10-17 00:00:00
OpenSSL multiple security vulnerabilities
2014-12-09 00:00:00
APPLE-SA-2015-09-16-2 Xcode 7.0
2015-10-05 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:23.openssl
2014-10-21 00:00:00
slackware
slackware
[slackware-security] openssl
2014-10-15 17:58:22
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2014-10-15 00:00:00
debian
debian
[SECURITY] [DLA 81-1] openssl security update
2014-11-01 15:49:46
[SECURITY] [DSA 3053-1] openssl security update
2014-10-16 15:48:24
osv
osv
openssl - security update
2014-10-16 00:00:00
openssl - security update
2014-11-01 00:00:00
libopenssl-1_1-devel-1.1.1l-1.2 on GA media
2024-06-15 00:00:00
kaspersky
kaspersky
KLA10359 Vulnerability in Tableau
2014-07-18 00:00:00
KLA10452 Multiple vulnerabilities in VMware products
2015-01-27 00:00:00
archlinux
archlinux
openssl: denial of service / man-in-the-middle / poodle mitigation
2014-10-16 00:00:00
vmware
vmware
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
2015-01-27 00:00:00
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
2015-01-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package openssl10 version 1.0.1j-alt1
2014-10-30 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.1j-alt1
2014-10-30 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1j-alt1
2014-10-30 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2014-12-26 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

4.5

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON
Related for CVE-2014-3568
f54ubuntucve2debiancve2cvelist2prion2nvd2veracode2openssl1ibm49suse9nessus36cve1openvas21amazon2securityvulns7freebsd_advisory1slackware1freebsd1debian2osv3kaspersky2archlinux1vmware2altlinux5gentoo1