There is a vulnerability in OpenSSL that is used by IBM WebSphere MQ - Advanced Message Security. This issue was disclosed on August 6, 2014 by the OpenSSL project.

Vulnerability Details

CVE-ID: CVE-2014-3508

DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in OBJ_obj2txt. If applications echo pretty printing output, an attacker could exploit this vulnerability to read information from the stack.

CVSS Base Score: 4.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/95165> for more information
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Affected Products and Versions

IBM WebSphere MQ - Advanced Message Security V8.0.0.0 for IBM i platform

Remediation/Fixes

Apply Fix Pack 8.0.0.1 or later.

Workarounds and Mitigations

None known

CPENameOperatorVersion
websphere mqeq8.0.0.1
websphere mqeq8.0

CPE	Name	Operator	Version
	websphere mq	eq	8.0.0.1
	websphere mq	eq	8.0

prion 2

f5 2

cve 2

cvelist 2

nvd 2

ubuntucve 1

openssl 1

veracode 1

debiancve 1

nessus 46

ibm 30

securityvulns 3

centos 2

openvas 31

redhat 3

debian 2

oraclelinux 8

freebsd_advisory 1

huawei 1

ubuntu 1

slackware 1

freebsd 1

aix 1

mageia 1

amazon 1

kaspersky 1

osv 1

fedora 8

altlinux 5

suse 2

lenovo 2

prion

Design/Logic Flaw

2014-08-13 23:55:00

Stack overflow

2020-01-23 20:15:00

K15571 : OpenSSL vulnerability CVE-2014-3508

2014-09-05 00:00:00

SOL15571 - OpenSSL vulnerability CVE-2014-3508

2014-09-05 00:00:00

cve

CVE-2014-3508

2014-08-13 23:55:07

CVE-2015-5334

2020-01-23 20:15:12

cvelist

CVE-2014-3508

2014-08-13 23:00:00

CVE-2015-5334

2020-01-23 19:56:11

nvd

CVE-2014-3508

2014-08-13 23:55:07

CVE-2015-5334

2020-01-23 20:15:12

ubuntucve

CVE-2014-3508

2014-08-07 00:00:00

openssl

Vulnerability in OpenSSL CVE-2014-3508

2014-08-06 00:00:00

veracode

Information Disclosure

2017-02-07 01:12:09

debiancve

CVE-2014-3508

2014-08-13 23:55:07

nessus

Oracle Solaris Third-Party Patch Update : openssl (cve_2014_3508_information_disclosure)

2015-01-19 00:00:00

Scientific Linux Security Update : openssl on SL5.x i386/x86_64 (20140813)

2014-08-15 00:00:00

SuSE 11.3 Security Update : OpenSSL (SAT Patch Number 9598)

2014-08-21 00:00:00

ibm

Security Bulletin: Vulnerabilities in OpenSSL (CVE-2014-3508 and CVE-2014-3509) affect the virtual machines deployed by IBM Workload Deployer.

2018-06-15 07:02:21

Security Bulletin: Vulnerabilities in OpenSSL (CVE-2014-3508 and CVE-2014-3509) affect the virtual machines deployed by IBM PureApplication System.

2018-06-15 07:03:23

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling Connect:Direct for Microsoft Windows (CVE-2014-3508, CVE-2014-3511)

2020-07-24 22:19:08

securityvulns

Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334)

2015-10-19 00:00:00

OpenSSL multiple security vulnerabilities

2014-08-07 00:00:00

ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities

2015-02-02 00:00:00

centos

openssl security update

2014-08-13 19:52:24

openssl security update

2014-08-13 20:10:43

openvas

Debian: Security Advisory (DLA-33-1)

2023-03-08 00:00:00

SUSE: Security Advisory (SUSE-SU-2014:1104-1)

2021-06-09 00:00:00

OpenSSL Multiple Vulnerabilities (20140806 - 1) - Windows

2021-07-19 00:00:00

redhat

(RHSA-2014:1053) Moderate: openssl security update

2014-08-13 00:00:00

(RHSA-2014:1052) Moderate: openssl security update

2014-08-13 00:00:00

(RHSA-2014:1054) Moderate: openssl security update

2014-08-14 00:00:00

debian

[DLA 33-1] openssl security update

2014-08-07 20:36:09

[SECURITY] [DSA 2998-1] openssl security update

2014-08-06 23:44:13

oraclelinux

openssl security update

2014-08-13 00:00:00

openssl security update

2014-08-13 00:00:00

openssl security update

2014-10-16 00:00:00

freebsd_advisory

FreeBSD-SA-14:18.openssl

2014-09-09 00:00:00

huawei

Security Advisory-9 OpenSSL vulnerabilities on Huawei products

2014-10-08 00:00:00

ubuntu

OpenSSL vulnerabilities

2014-08-07 00:00:00

slackware

[slackware-security] openssl

2014-08-08 21:22:00

freebsd

OpenSSL -- multiple vulnerabilities

2014-08-06 00:00:00

aix

AIX OpenSSL Denial of Service due to double free and others

2014-09-09 00:50:00

mageia

Updated openssl packages fix security vulnerabilities

2014-08-12 13:16:46

amazon

Medium: openssl

2014-08-07 12:26:00

kaspersky

KLA10343 Multiple vulnerabilities in Stunnel

2014-08-07 00:00:00

osv

openssl - security update

2014-08-07 00:00:00

fedora

[SECURITY] Fedora 21 Update: mingw-openssl-1.0.1j-1.fc21

2015-01-02 05:06:53

[SECURITY] Fedora 20 Update: openssl-1.0.1e-39.fc20

2014-08-09 07:36:05

[SECURITY] Fedora 19 Update: openssl-1.0.1e-39.fc19

2014-08-09 07:34:58

altlinux

Security fix for the ALT Linux 7 package openssl10 version 1.0.1j-alt0.M70P.1

2014-10-31 00:00:00

Security fix for the ALT Linux 8 package openssl10 version 1.0.1j-alt1

2014-10-30 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1j-alt1

2014-10-30 00:00:00

suse

Security update for compat-openssl097g (important)

2015-03-24 00:05:09

Security update for libopenssl0_9_8 (important)

2016-03-03 14:11:44

lenovo

Intel® PROSet/Wireless WiFi Software Vulnerabilities - US

2018-11-13 17:10:51

Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US

2018-11-13 17:10:51

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

0.47 Medium

EPSS

Percentile

97.5%

JSON

Related for E9A16E01D725E7EEE1F28FADC7D20FFB96AD7E58A347FCE28DCBA078F8294379