CVE-2014-0198
- State
- Published
- Severity
- Not scored
- Published
- May 6, 2014
- Updated
- Aug 6, 2024
- Reserved
- Dec 3, 2013
Description
The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 59342third-party-advisory
- 59669third-party-advisory
- 59525third-party-advisory
- 59282third-party-advisory
- 59990third-party-advisory
- 59264third-party-advisory
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15329.html
- 59126third-party-advisory
- 67193vdb-entry
- 59306third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1093837
- HPSBGN03068vendor-advisory
- 59190third-party-advisory
- 59529third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- 61254third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21676655
- http://puppetlabs.com/security/cve/cve-2014-0198
- 59449third-party-advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946
- http://www-01.ibm.com/support/docview.wss?uid=swg21676879
- http://www-01.ibm.com/support/docview.wss?uid=swg21677828
- HPSBMU03074vendor-advisory
- 59300third-party-advisory
- 58667third-party-advisory
- GLSA-201407-05vendor-advisory
- 59284third-party-advisory
- http://www.ibm.com/support/docview.wss?uid=swg24037783
- http://www-01.ibm.com/support/docview.wss?uid=swg21677695
- http://www-01.ibm.com/support/docview.wss?uid=swg21676529
- http://advisories.mageia.org/MGASA-2014-0204.html
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilitiesmailing-list
- http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163
- http://www-01.ibm.com/support/docview.wss?uid=swg21676889
- FEDORA-2014-9308vendor-advisory
- 58945third-party-advisory
- [5.5] 005: RELIABILITY FIX: May 1, 2014vendor-advisory
- 59440third-party-advisory
- https://rt.openssl.org/Ticket/Display.html?user=guest&pass=guest&id=3321
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- 59655third-party-advisory
- 59163third-party-advisory
- DSA-2931vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21677836
- 59437third-party-advisory
- http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754
- 59374third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2014-0006.html
- 59310third-party-advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc
- http://www.fortiguard.com/advisory/FG-IR-14-018/
- SUSE-SU-2015:0743vendor-advisory
- http://www.ibm.com/support/docview.wss?uid=swg21676356
- HPSBMU03057vendor-advisory
- http://support.citrix.com/article/CTX140876
- http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757
- 58939third-party-advisory
- 59514third-party-advisory
- 20140605 Multiple Vulnerabilities in OpenSSL Affecting Cisco Productsvendor-advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195
- https://kc.mcafee.com/corporate/index?page=content&id=SB10075
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://www-01.ibm.com/support/docview.wss?uid=swg21676419
- 59438third-party-advisory
- 58714third-party-advisory
- HPSBHF03052vendor-advisory
- http://www.openssl.org/news/secadv_20140605.txt
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilitiesmailing-list
- 60066third-party-advisory
- 59301third-party-advisory
- openSUSE-SU-2014:0634vendor-advisory
- 59784third-party-advisory
- https://kb.bluecoat.com/index?page=content&id=SA80
- HPSBMU03076vendor-advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629
- http://www-01.ibm.com/support/docview.wss?uid=swg21678167
- FEDORA-2014-9301vendor-advisory
- HPSBMU03062vendor-advisory
- MDVSA-2014:080vendor-advisory
- HPSBMU03056vendor-advisory
- HPSBMU03051vendor-advisory
- 59666third-party-advisory
- HPSBMU03055vendor-advisory
- 59413third-party-advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- 59721third-party-advisory
- http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756
- http://www-01.ibm.com/support/docview.wss?uid=swg21676062
- 58713third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21673137
- MDVSA-2015:062vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21676035
- 59450third-party-advisory
- 59287third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21683332
- 59491third-party-advisory
- 58977third-party-advisory
- openSUSE-SU-2014:0635vendor-advisory
- https://www.novell.com/support/kb/doc.php?id=7015271
- 60571third-party-advisory
- http://www.blackberry.com/btsc/KB36051
- http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm
- http://www-01.ibm.com/support/docview.wss?uid=swg21677527
- 59202third-party-advisory
- 58337third-party-advisory
- 59162third-party-advisory
- 59398third-party-advisory
- 59490third-party-advisory
- 60049third-party-advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.