Lucene search

Veracode Vulnerability DatabaseVERACODE:3477

HistoryFeb 07, 2017 - 1:31 a.m.

Denial Of Service (DoS) Through Memory Consumption

2017-02-0701:31:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.887 High

EPSS

Percentile

98.7%

JSON

OpenSSL is vulnerable to denial of service (DoS) through memory consumption. This can be triggered through a DTLS handshake method which forces OpenSSL to process a large amount of data, exhausting the memory.

CPENameOperatorVersion
opensslle1.0.108
openssleq1.0.0__4.el6_0.1
openssleq0.9.8b__8.3.el5
openssleq0.9.8e__22.el5_8.1
openssleq0.9.8b__8.3.el5_0.2
openssleq0.9.8b__10.el5_2.1
openssleq0.9.8e__12.el5_4.1
openssleq0.9.8e__22.el5_8.3
openssleq1.0.0__27.el6
openssleq0.9.8e__7.el5

Name	Operator	Version
openssl	le	1.0.108
openssl	eq	1.0.0__4.el6_0.1
openssl	eq	0.9.8b__8.3.el5
openssl	eq	0.9.8e__22.el5_8.1
openssl	eq	0.9.8b__8.3.el5_0.2
openssl	eq	0.9.8b__10.el5_2.1
openssl	eq	0.9.8e__12.el5_4.1
openssl	eq	0.9.8e__22.el5_8.3
openssl	eq	1.0.0__27.el6
openssl	eq	0.9.8e__7.el5

Rows per page:

1-10 of 331

References

aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc

linux.oracle.com/errata/ELSA-2014-1052.html

linux.oracle.com/errata/ELSA-2014-1053.html

lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html

lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html

lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html

lists.opensuse.org/opensuse-updates/2014-08/msg00036.html

marc.info/?l=bugtraq&m=140853041709441&w=2

marc.info/?l=bugtraq&m=141077370928502&w=2

marc.info/?l=bugtraq&m=142660345230545&w=2

rhn.redhat.com/errata/RHSA-2014-1256.html

rhn.redhat.com/errata/RHSA-2014-1297.html

secunia.com/advisories/58962

secunia.com/advisories/59221

secunia.com/advisories/59700

secunia.com/advisories/59710

secunia.com/advisories/59743

secunia.com/advisories/59756

secunia.com/advisories/60022

secunia.com/advisories/60221

secunia.com/advisories/60493

secunia.com/advisories/60684

secunia.com/advisories/60687

secunia.com/advisories/60778

secunia.com/advisories/60803

secunia.com/advisories/60824

secunia.com/advisories/60917

secunia.com/advisories/60921

secunia.com/advisories/60938

secunia.com/advisories/61017

secunia.com/advisories/61040

secunia.com/advisories/61100

secunia.com/advisories/61184

secunia.com/advisories/61250

secunia.com/advisories/61775

secunia.com/advisories/61959

security.gentoo.org/glsa/glsa-201412-39.xml

support.f5.com/kb/en-us/solutions/public/15000/500/sol15573.html

www-01.ibm.com/support/docview.wss?uid=nas8N1020240

www-01.ibm.com/support/docview.wss?uid=swg21682293

www-01.ibm.com/support/docview.wss?uid=swg21683389

www-01.ibm.com/support/docview.wss?uid=swg21686997

www.debian.org/security/2014/dsa-2998

www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm

www.mandriva.com/security/advisories?name=MDVSA-2014:158

www.securityfocus.com/bid/69076

www.securitytracker.com/id/1030693

bugzilla.redhat.com/show_bug.cgi?id=1127500

exchange.xforce.ibmcloud.com/vulnerabilities/95160

git.openssl.org/gitweb/?p=openssl.git;a=commit;h=1250f12613b61758675848f6600ebd914ccd7636

lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html

www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc

www.openssl.org/news/secadv/20140806.txt

www.openssl.org/news/secadv_20140806.txt