Lucene search
OpenSSLOPENSSL:CVE-2014-3513HistoryOct 15, 2014 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2014-3513
2014-10-1500:00:00
www.openssl.org
36
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
4.5 Medium
AI Score
Confidence
High
0.823 High
EPSS
Percentile
98.4%
A flaw in the DTLS SRTP extension parsing code allows an attacker, who sends a carefully crafted handshake message, to cause OpenSSL to fail to free up to 64k of memory causing a memory leak. This could be exploited in a Denial Of Service attack. This issue affects OpenSSL 1.0.1 server implementations for both SSL/TLS and DTLS regardless of whether SRTP is used or configured. Implementations of OpenSSL that have been compiled with OPENSSL_NO_SRTP defined are not affected.
Related
openvas
openvas
OpenSSL DoS Vulnerability (20141015) - Linux
2021-07-19 00:00:00
OpenSSL DoS Vulnerability (20141015) - Windows
2021-07-19 00:00:00
Ubuntu: Security Advisory (USN-2385-1)
2014-10-17 00:00:00
f5
f5
K15722 : OpenSSL DTLS SRTP Memory Leak CVE-2014-3513
2015-09-16 00:00:00
SOL15722 - OpenSSL DTLS SRTP Memory Leak CVE-2014-3513
2014-10-23 00:00:00
veracode
veracode
Denial Of Service (DoS) Through Memory Consumption
2019-01-15 09:02:31
Denial Of Service (DoS) Through Memory Consumption
2017-02-07 00:45:14
checkpoint_advisories
checkpoint_advisories
OpenSSL DTLS SRTP Extension Parsing Denial of Service (CVE-2014-3513)
2015-02-01 00:00:00
cve
cve
CVE-2014-3513
2014-10-19 01:55:13
ubuntucve
ubuntucve
CVE-2014-3513
2014-10-15 00:00:00
nvd
nvd
CVE-2014-3513
2014-10-19 01:55:13
cvelist
cvelist
CVE-2014-3513
2014-10-19 01:00:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL DTLS SRTP Memory Leak (SOL15722)
2014-12-29 00:00:00
Tenable SecurityCenter Multiple DoS (TNS-2014-11)
2014-12-30 00:00:00
Ubuntu 14.04 LTS : OpenSSL vulnerabilities (USN-2385-1)
2014-10-17 00:00:00
prion
prion
Memory corruption
2014-10-19 01:55:00
debiancve
debiancve
CVE-2014-3513
2014-10-19 01:55:13
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-10-16 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Composite Application Manager for Transactions (CVE-2014-3513, CVE-2014-3567)
2018-06-17 14:51:40
centos
centos
openssl security update
2014-10-16 16:22:42
mageia
mageia
Updated openssl packages fix security vulnerabilities
2014-10-23 17:27:57
aix
aix
amazon
amazon
Important: openssl
2014-10-15 16:14:00
redhat
redhat
(RHSA-2014:1692) Important: openssl security update
2014-10-22 00:00:00
(RHSA-2014:1652) Important: openssl security update
2014-10-16 00:00:00
archlinux
archlinux
openssl: denial of service / man-in-the-middle / poodle mitigation
2014-10-16 00:00:00
kaspersky
kaspersky
KLA10359 Vulnerability in Tableau
2014-07-18 00:00:00
KLA10452 Multiple vulnerabilities in VMware products
2015-01-27 00:00:00
debian
debian
[SECURITY] [DSA 3053-1] openssl security update
2014-10-16 15:48:24
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:23.openssl
2014-10-21 00:00:00
slackware
slackware
[slackware-security] openssl
2014-10-15 17:58:22
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2014-10-15 00:00:00
suse
suse
Security update for openssl1 (important)
2014-11-04 23:04:45
update for openssl (important)
2014-10-29 16:05:00
Security update for OpenSSL (important)
2014-11-11 00:05:06
securityvulns
securityvulns
[slackware-security] openssl (SSA:2014-288-01)
2014-10-17 00:00:00
OpenSSL multiple security vulnerabilities
2014-12-09 00:00:00
APPLE-SA-2015-09-16-2 Xcode 7.0
2015-10-05 00:00:00
osv
osv
openssl - security update
2014-10-16 00:00:00
vmware
vmware
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.1j-alt1
2014-10-30 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1j-alt1
2014-10-30 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2014-12-26 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: openssl-1.0.1e-40.fc19
2014-10-19 13:22:31
[SECURITY] Fedora 20 Update: openssl-1.0.1e-40.fc20
2014-10-18 16:57:46
[SECURITY] Fedora 20 Update: openssl-1.0.1e-41.fc20
2015-01-20 21:05:44
oraclelinux
oraclelinux
openssl security update
2014-10-16 00:00:00
openssl security update
2016-09-27 00:00:00
openssl security update
2021-04-01 00:00:00
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
4.5 Medium
AI Score
Confidence
High
0.823 High
EPSS
Percentile
98.4%
Related for OPENSSL:CVE-2014-3513