Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2014-3569
HistoryDec 24, 2014 - 11:59 a.m.

Null pointer dereference

2014-12-2411:59:00
PRIOn knowledge base
www.prio-n.com
8

6.7 Medium

AI Score

Confidence

High

0.892 High

EPSS

Percentile

98.8%

JSON

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling. NOTE: this issue became relevant after the CVE-2014-3568 fix.

CPENameOperatorVersion
openssleq1.0.1106

References

Related

veracode 2
f5 4
cve 3
debiancve 2
ubuntucve 2
nvd 3
cvelist 2
openvas 27
debian 4
osv 3
nessus 40
openssl 2
checkpoint_advisories 1
prion 1
ibm 68
suse 8
amazon 2
archlinux 2
kaspersky 3
freebsd_advisory 2
freebsd 2
slackware 2
securityvulns 4
altlinux 6
cisco 1
vmware 2
mageia 1
veracode
veracode
Denial Of Service (DoS) Through Null Pointer Dereference
2017-02-06 08:21:22
Access Restriction Bypass
2017-02-06 08:45:07
f5
f5
SOL16013 - OpenSSL vulnerability CVE-2014-3569
2015-01-28 00:00:00
K16013 : OpenSSL vulnerability CVE-2014-3569
2015-01-29 00:00:00
K15724 : OpenSSL vulnerability CVE-2014-3568
2014-10-23 00:00:00
cve
cve
CVE-2014-3569
2014-12-24 11:59:00
CVE-2014-3568
2014-10-19 01:55:13
CVE-2015-3569
2016-04-26 10:59:00
debiancve
debiancve
CVE-2014-3569
2014-12-24 11:59:00
CVE-2014-3568
2014-10-19 01:55:13
ubuntucve
ubuntucve
CVE-2014-3569
2014-12-24 00:00:00
CVE-2014-3568
2014-10-19 00:00:00
nvd
nvd
CVE-2014-3569
2014-12-24 11:59:00
CVE-2014-3568
2014-10-19 01:55:13
CVE-2015-3569
2016-04-26 10:59:00
cvelist
cvelist
CVE-2014-3569
2014-12-24 11:00:00
CVE-2014-3568
2014-10-19 01:00:00
openvas
openvas
Debian: Security Advisory (DLA-81-1)
2023-03-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-469)
2015-09-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1387-1)
2021-06-09 00:00:00
debian
debian
[SECURITY] [DLA 81-1] openssl security update
2014-11-01 15:49:46
[SECURITY] [DSA 3053-1] openssl security update
2014-10-16 15:48:24
[SECURITY] [DSA 3125-1] openssl security update
2015-01-11 11:05:13
osv
osv
openssl - security update
2014-11-01 00:00:00
openssl - security update
2014-10-16 00:00:00
openssl - security update
2015-01-11 00:00:00
nessus
nessus
Debian DLA-81-1 : openssl security update
2015-03-26 00:00:00
OpenSSL 0.9.8 < 0.9.8zd Multiple Vulnerabilities
2015-01-16 00:00:00
OpenSSL 0.9.8 < 0.9.8zc Multiple Vulnerabilities
2014-10-17 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2014-3569
2014-10-21 00:00:00
Vulnerability in OpenSSL CVE-2014-3568
2014-10-15 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL ssl23_get_client_hello Function Denial of Service (CVE-2014-3569)
2015-01-12 00:00:00
prion
prion
Design/Logic Flaw
2014-10-19 01:55:00
ibm
ibm
Security Bulletin: Vulnerabilities in OpenSSL affect IBM Global Console Manager (GCM) and Local Console Manager (LCM) Switches (CVE-2014-3567, CVE-2014-3568)
2019-01-31 01:55:01
Security Bulletin: Vulnerabilities in OpenSSL affect IBM MessageSight (CVE-2014-3569, CVE-2015-0205)
2018-06-17 15:12:14
Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cognos TM1 including a vulnerabiltiy in the RC4 stream ciphers (CVE-2015-2808, CVE-2014-3569).
2018-06-15 22:36:55
suse
suse
Security update for OpenSSL (important)
2014-11-12 19:05:00
Security update for OpenSSL (important)
2014-11-11 01:04:46
Security update for OpenSSL (important)
2014-11-05 23:04:47
amazon
amazon
Medium: openssl
2015-01-11 12:36:00
Important: openssl
2014-10-15 16:14:00
archlinux
archlinux
openssl: denial of service / man-in-the-middle / poodle mitigation
2014-10-16 00:00:00
openssl: multiple issues
2015-01-09 00:00:00
kaspersky
kaspersky
KLA10359 Vulnerability in Tableau
2014-07-18 00:00:00
KLA10460 Multiple vulnerabilities in OpenSSL
2015-01-08 00:00:00
KLA10452 Multiple vulnerabilities in VMware products
2015-01-27 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:23.openssl
2014-10-21 00:00:00
FreeBSD-SA-15:01.openssl
2015-01-14 00:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2014-10-15 00:00:00
OpenSSL -- multiple vulnerabilities
2015-01-08 00:00:00
slackware
slackware
[slackware-security] openssl
2014-10-15 17:58:22
[slackware-security] openssl
2015-01-09 18:34:39
securityvulns
securityvulns
[slackware-security] openssl &#40;SSA:2014-288-01&#41;
2014-10-17 00:00:00
OpenSSL multiple security vulnerabilities
2014-12-09 00:00:00
OpenSSL multiple security vulnerabilities
2015-01-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 1.0.1k-alt1
2015-01-12 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 1.0.0p-alt0.M60P.1
2015-04-23 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt0.M70P.1
2015-01-12 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
2015-03-10 16:00:00
vmware
vmware
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
2015-01-27 00:00:00
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
2015-01-27 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2015-01-11 22:54:28

6.7 Medium

AI Score

Confidence

High

0.892 High

EPSS

Percentile

98.8%

JSON
Related for PRION:CVE-2014-3569
veracode2f54cve3debiancve2ubuntucve2nvd3cvelist2openvas27debian4osv3nessus40openssl2checkpoint_advisories1prion1ibm68suse8amazon2archlinux2kaspersky3freebsd_advisory2freebsd2slackware2securityvulns4altlinux6cisco1vmware2mageia1