Lucene search
OpenSSLOPENSSL:CVE-2014-0221HistoryJun 05, 2014 - 12:00 a.m.
Vulnerability in OpenSSL - DTLS recursion flaw
2014-06-0500:00:00
www.openssl-library.org
35
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
7.2
Confidence
High
EPSS
0.964
Percentile
99.6%
By sending an invalid DTLS handshake to an OpenSSL DTLS client the code can be made to recurse eventually crashing in a DoS attack. Only applications using OpenSSL as a DTLS client are affected.
Found by Imre Rad (Search-Lab Ltd.).
Affected configurations
Node
opensslopensslRange1.0.1–1.0.1h
ORopensslopensslRange1.0.0–1.0.0m
ORopensslopensslRange0.9.8–0.9.8za
Related
f5
f5
SOL15343 - OpenSSL vulnerability CVE-2014-0221
2014-06-16 00:00:00
K15343 : OpenSSL vulnerability CVE-2014-0221
2015-11-09 00:00:00
veracode
veracode
Denial Of Service (DoS) Through Recursion
2019-01-15 08:59:10
Denial Of Service (DoS) Through Recursion
2017-02-07 02:18:10
mariadbunix
mariadbunix
CVE-2014-0221
2014-06-05 21:55:06
checkpoint_advisories
checkpoint_advisories
OpenSSL DTLS Hello Message Denial of Service (CVE-2014-0221)
2014-06-08 00:00:00
nessus
nessus
Rockwell Automation Stratix DTLS Recursion Flaw (CVE-2014-0221)
2023-11-15 00:00:00
F5 Networks BIG-IP : OpenSSL vulnerability (SOL15343)
2014-10-10 00:00:00
EulerOS 2.0 SP5 : openssl098e (EulerOS-SA-2020-1121)
2020-02-24 00:00:00
debiancve
debiancve
CVE-2014-0221
2014-06-05 21:55:06
cve
cve
CVE-2014-0221
2014-06-05 21:55:06
nvd
nvd
CVE-2014-0221
2014-06-05 21:55:06
prion
prion
Design/Logic Flaw
2014-06-05 21:55:00
openvas
openvas
Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2020-1121)
2020-02-24 00:00:00
Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2022-2717)
2022-11-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0759-1)
2021-06-09 00:00:00
cvelist
cvelist
CVE-2014-0221
2014-06-05 21:00:00
ubuntucve
ubuntucve
CVE-2014-0221
2014-06-05 00:00:00
suse
suse
Security update for OpenSSL (critical)
2014-06-06 00:04:19
Security update for OpenSSL (critical)
2014-06-07 01:04:17
update to version 1.0.0m (critical)
2014-06-06 12:04:17
debian
debian
[SECURITY] [DSA 2950-2] openssl update
2014-06-16 18:21:12
[SECURITY] [DSA 2950-1] openssl security update
2014-06-05 11:51:34
openssl security update
2014-06-05 19:36:04
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-06-05 00:00:00
OpenSSL regression
2014-06-12 00:00:00
OpenSSL regression
2014-06-23 00:00:00
mageia
mageia
Updated openssl packages fix multiple vulnerabilties
2014-06-06 14:31:01
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2014-06-05 00:00:00
ibm
ibm
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:14.openssl
2014-06-05 00:00:00
osv
osv
openssl - security update
2014-06-05 00:00:00
openssl - security update
2014-06-05 00:00:00
securityvulns
securityvulns
OpenSSL multiple security vulnerabilities
2014-06-06 00:00:00
ESA-2014-079: EMC Documentum Content Server Multiple Vulnerabilities
2014-08-26 00:00:00
centos
centos
openssl security update
2014-08-13 19:52:24
openssl security update
2014-06-05 13:06:47
redhat
redhat
(RHSA-2014:1053) Moderate: openssl security update
2014-08-13 00:00:00
(RHSA-2014:0628) Important: openssl security update
2014-06-05 00:00:00
(RHSA-2014:0679) Important: openssl security update
2014-06-10 00:00:00
aix
aix
AIX OpenSSL Vulnerabilities (Multiple CVEs)
2014-06-11 06:39:27
oraclelinux
oraclelinux
openssl security update
2014-07-23 00:00:00
openssl security update
2014-08-13 00:00:00
openssl security update
2014-06-05 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2014-07-27 00:00:00
vmware
vmware
VMware product updates address OpenSSL security vulnerabilities
2014-06-10 00:00:00
thn
thn
OpenSSL Vulnerable to Man-in-the-Middle Attack and Several Other Bugs
2014-06-05 05:49:00
slackware
slackware
[slackware-security] openssl
2014-06-06 05:27:11
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
2014-06-05 22:40:00
amazon
amazon
Important: openssl
2014-06-04 15:45:00
intel
intel
fortinet
fortinet
Multiple Vulnerabilities in OpenSSL
2014-06-06 00:00:00
huawei
huawei
Security Advisory-Multiple OpenSSL vulnerabilities on Huawei products
2014-06-13 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: openssl-1.0.1e-38.fc19
2014-06-05 21:54:15
[SECURITY] Fedora 20 Update: openssl-1.0.1e-38.fc20
2014-06-05 21:55:11
[SECURITY] Fedora 21 Update: mingw-openssl-1.0.1j-1.fc21
2015-01-02 05:06:53
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
7.2
Confidence
High
EPSS
0.964
Percentile
99.6%
Related for OPENSSL:CVE-2014-0221